/* Generated by Cython 0.23.4 */

#define PY_SSIZE_T_CLEAN
#include "Python.h"
#ifndef Py_PYTHON_H
    #error Python headers needed to compile C extensions, please install development version of Python.
#elif PY_VERSION_HEX < 0x02060000 || (0x03000000 <= PY_VERSION_HEX && PY_VERSION_HEX < 0x03020000)
    #error Cython requires Python 2.6+ or Python 3.2+.
#else
#define CYTHON_ABI "0_23_4"
#include <stddef.h>
#ifndef offsetof
#define offsetof(type, member) ( (size_t) & ((type*)0) -> member )
#endif
#if !defined(WIN32) && !defined(MS_WINDOWS)
  #ifndef __stdcall
    #define __stdcall
  #endif
  #ifndef __cdecl
    #define __cdecl
  #endif
  #ifndef __fastcall
    #define __fastcall
  #endif
#endif
#ifndef DL_IMPORT
  #define DL_IMPORT(t) t
#endif
#ifndef DL_EXPORT
  #define DL_EXPORT(t) t
#endif
#ifndef PY_LONG_LONG
  #define PY_LONG_LONG LONG_LONG
#endif
#ifndef Py_HUGE_VAL
  #define Py_HUGE_VAL HUGE_VAL
#endif
#ifdef PYPY_VERSION
#define CYTHON_COMPILING_IN_PYPY 1
#define CYTHON_COMPILING_IN_CPYTHON 0
#else
#define CYTHON_COMPILING_IN_PYPY 0
#define CYTHON_COMPILING_IN_CPYTHON 1
#endif
#if !defined(CYTHON_USE_PYLONG_INTERNALS) && CYTHON_COMPILING_IN_CPYTHON && PY_VERSION_HEX >= 0x02070000
#define CYTHON_USE_PYLONG_INTERNALS 1
#endif
#if CYTHON_COMPILING_IN_PYPY && PY_VERSION_HEX < 0x02070600 && !defined(Py_OptimizeFlag)
#define Py_OptimizeFlag 0
#endif
#define __PYX_BUILD_PY_SSIZE_T "n"
#define CYTHON_FORMAT_SSIZE_T "z"
#if PY_MAJOR_VERSION < 3
  #define __Pyx_BUILTIN_MODULE_NAME "__builtin__"
  #define __Pyx_PyCode_New(a, k, l, s, f, code, c, n, v, fv, cell, fn, name, fline, lnos)\
          PyCode_New(a+k, l, s, f, code, c, n, v, fv, cell, fn, name, fline, lnos)
  #define __Pyx_DefaultClassType PyClass_Type
#else
  #define __Pyx_BUILTIN_MODULE_NAME "builtins"
  #define __Pyx_PyCode_New(a, k, l, s, f, code, c, n, v, fv, cell, fn, name, fline, lnos)\
          PyCode_New(a, k, l, s, f, code, c, n, v, fv, cell, fn, name, fline, lnos)
  #define __Pyx_DefaultClassType PyType_Type
#endif
#ifndef Py_TPFLAGS_CHECKTYPES
  #define Py_TPFLAGS_CHECKTYPES 0
#endif
#ifndef Py_TPFLAGS_HAVE_INDEX
  #define Py_TPFLAGS_HAVE_INDEX 0
#endif
#ifndef Py_TPFLAGS_HAVE_NEWBUFFER
  #define Py_TPFLAGS_HAVE_NEWBUFFER 0
#endif
#ifndef Py_TPFLAGS_HAVE_FINALIZE
  #define Py_TPFLAGS_HAVE_FINALIZE 0
#endif
#if PY_VERSION_HEX > 0x03030000 && defined(PyUnicode_KIND)
  #define CYTHON_PEP393_ENABLED 1
  #define __Pyx_PyUnicode_READY(op)       (likely(PyUnicode_IS_READY(op)) ?\
                                              0 : _PyUnicode_Ready((PyObject *)(op)))
  #define __Pyx_PyUnicode_GET_LENGTH(u)   PyUnicode_GET_LENGTH(u)
  #define __Pyx_PyUnicode_READ_CHAR(u, i) PyUnicode_READ_CHAR(u, i)
  #define __Pyx_PyUnicode_KIND(u)         PyUnicode_KIND(u)
  #define __Pyx_PyUnicode_DATA(u)         PyUnicode_DATA(u)
  #define __Pyx_PyUnicode_READ(k, d, i)   PyUnicode_READ(k, d, i)
#else
  #define CYTHON_PEP393_ENABLED 0
  #define __Pyx_PyUnicode_READY(op)       (0)
  #define __Pyx_PyUnicode_GET_LENGTH(u)   PyUnicode_GET_SIZE(u)
  #define __Pyx_PyUnicode_READ_CHAR(u, i) ((Py_UCS4)(PyUnicode_AS_UNICODE(u)[i]))
  #define __Pyx_PyUnicode_KIND(u)         (sizeof(Py_UNICODE))
  #define __Pyx_PyUnicode_DATA(u)         ((void*)PyUnicode_AS_UNICODE(u))
  #define __Pyx_PyUnicode_READ(k, d, i)   ((void)(k), (Py_UCS4)(((Py_UNICODE*)d)[i]))
#endif
#if CYTHON_COMPILING_IN_PYPY
  #define __Pyx_PyUnicode_Concat(a, b)      PyNumber_Add(a, b)
  #define __Pyx_PyUnicode_ConcatSafe(a, b)  PyNumber_Add(a, b)
#else
  #define __Pyx_PyUnicode_Concat(a, b)      PyUnicode_Concat(a, b)
  #define __Pyx_PyUnicode_ConcatSafe(a, b)  ((unlikely((a) == Py_None) || unlikely((b) == Py_None)) ?\
      PyNumber_Add(a, b) : __Pyx_PyUnicode_Concat(a, b))
#endif
#if CYTHON_COMPILING_IN_PYPY && !defined(PyUnicode_Contains)
  #define PyUnicode_Contains(u, s)  PySequence_Contains(u, s)
#endif
#define __Pyx_PyString_FormatSafe(a, b)   ((unlikely((a) == Py_None)) ? PyNumber_Remainder(a, b) : __Pyx_PyString_Format(a, b))
#define __Pyx_PyUnicode_FormatSafe(a, b)  ((unlikely((a) == Py_None)) ? PyNumber_Remainder(a, b) : PyUnicode_Format(a, b))
#if PY_MAJOR_VERSION >= 3
  #define __Pyx_PyString_Format(a, b)  PyUnicode_Format(a, b)
#else
  #define __Pyx_PyString_Format(a, b)  PyString_Format(a, b)
#endif
#if PY_MAJOR_VERSION >= 3
  #define PyBaseString_Type            PyUnicode_Type
  #define PyStringObject               PyUnicodeObject
  #define PyString_Type                PyUnicode_Type
  #define PyString_Check               PyUnicode_Check
  #define PyString_CheckExact          PyUnicode_CheckExact
#endif
#if PY_MAJOR_VERSION >= 3
  #define __Pyx_PyBaseString_Check(obj) PyUnicode_Check(obj)
  #define __Pyx_PyBaseString_CheckExact(obj) PyUnicode_CheckExact(obj)
#else
  #define __Pyx_PyBaseString_Check(obj) (PyString_Check(obj) || PyUnicode_Check(obj))
  #define __Pyx_PyBaseString_CheckExact(obj) (PyString_CheckExact(obj) || PyUnicode_CheckExact(obj))
#endif
#ifndef PySet_CheckExact
  #define PySet_CheckExact(obj)        (Py_TYPE(obj) == &PySet_Type)
#endif
#define __Pyx_TypeCheck(obj, type) PyObject_TypeCheck(obj, (PyTypeObject *)type)
#if PY_MAJOR_VERSION >= 3
  #define PyIntObject                  PyLongObject
  #define PyInt_Type                   PyLong_Type
  #define PyInt_Check(op)              PyLong_Check(op)
  #define PyInt_CheckExact(op)         PyLong_CheckExact(op)
  #define PyInt_FromString             PyLong_FromString
  #define PyInt_FromUnicode            PyLong_FromUnicode
  #define PyInt_FromLong               PyLong_FromLong
  #define PyInt_FromSize_t             PyLong_FromSize_t
  #define PyInt_FromSsize_t            PyLong_FromSsize_t
  #define PyInt_AsLong                 PyLong_AsLong
  #define PyInt_AS_LONG                PyLong_AS_LONG
  #define PyInt_AsSsize_t              PyLong_AsSsize_t
  #define PyInt_AsUnsignedLongMask     PyLong_AsUnsignedLongMask
  #define PyInt_AsUnsignedLongLongMask PyLong_AsUnsignedLongLongMask
  #define PyNumber_Int                 PyNumber_Long
#endif
#if PY_MAJOR_VERSION >= 3
  #define PyBoolObject                 PyLongObject
#endif
#if PY_MAJOR_VERSION >= 3 && CYTHON_COMPILING_IN_PYPY
  #ifndef PyUnicode_InternFromString
    #define PyUnicode_InternFromString(s) PyUnicode_FromString(s)
  #endif
#endif
#if PY_VERSION_HEX < 0x030200A4
  typedef long Py_hash_t;
  #define __Pyx_PyInt_FromHash_t PyInt_FromLong
  #define __Pyx_PyInt_AsHash_t   PyInt_AsLong
#else
  #define __Pyx_PyInt_FromHash_t PyInt_FromSsize_t
  #define __Pyx_PyInt_AsHash_t   PyInt_AsSsize_t
#endif
#if PY_MAJOR_VERSION >= 3
  #define __Pyx_PyMethod_New(func, self, klass) ((self) ? PyMethod_New(func, self) : PyInstanceMethod_New(func))
#else
  #define __Pyx_PyMethod_New(func, self, klass) PyMethod_New(func, self, klass)
#endif
#if PY_VERSION_HEX >= 0x030500B1
#define __Pyx_PyAsyncMethodsStruct PyAsyncMethods
#define __Pyx_PyType_AsAsync(obj) (Py_TYPE(obj)->tp_as_async)
#elif CYTHON_COMPILING_IN_CPYTHON && PY_MAJOR_VERSION >= 3
typedef struct {
    unaryfunc am_await;
    unaryfunc am_aiter;
    unaryfunc am_anext;
} __Pyx_PyAsyncMethodsStruct;
#define __Pyx_PyType_AsAsync(obj) ((__Pyx_PyAsyncMethodsStruct*) (Py_TYPE(obj)->tp_reserved))
#else
#define __Pyx_PyType_AsAsync(obj) NULL
#endif
#ifndef CYTHON_RESTRICT
  #if defined(__GNUC__)
    #define CYTHON_RESTRICT __restrict__
  #elif defined(_MSC_VER) && _MSC_VER >= 1400
    #define CYTHON_RESTRICT __restrict
  #elif defined (__STDC_VERSION__) && __STDC_VERSION__ >= 199901L
    #define CYTHON_RESTRICT restrict
  #else
    #define CYTHON_RESTRICT
  #endif
#endif
#define __Pyx_void_to_None(void_result) ((void)(void_result), Py_INCREF(Py_None), Py_None)

#ifndef CYTHON_INLINE
  #if defined(__GNUC__)
    #define CYTHON_INLINE __inline__
  #elif defined(_MSC_VER)
    #define CYTHON_INLINE __inline
  #elif defined (__STDC_VERSION__) && __STDC_VERSION__ >= 199901L
    #define CYTHON_INLINE inline
  #else
    #define CYTHON_INLINE
  #endif
#endif

#if defined(WIN32) || defined(MS_WINDOWS)
  #define _USE_MATH_DEFINES
#endif
#include <math.h>
#ifdef NAN
#define __PYX_NAN() ((float) NAN)
#else
static CYTHON_INLINE float __PYX_NAN() {
  float value;
  memset(&value, 0xFF, sizeof(value));
  return value;
}
#endif


#if PY_MAJOR_VERSION >= 3
  #define __Pyx_PyNumber_Divide(x,y)         PyNumber_TrueDivide(x,y)
  #define __Pyx_PyNumber_InPlaceDivide(x,y)  PyNumber_InPlaceTrueDivide(x,y)
#else
  #define __Pyx_PyNumber_Divide(x,y)         PyNumber_Divide(x,y)
  #define __Pyx_PyNumber_InPlaceDivide(x,y)  PyNumber_InPlaceDivide(x,y)
#endif

#ifndef __PYX_EXTERN_C
  #ifdef __cplusplus
    #define __PYX_EXTERN_C extern "C"
  #else
    #define __PYX_EXTERN_C extern
  #endif
#endif

#define __PYX_HAVE__kstreamc
#define __PYX_HAVE_API__kstreamc
#include "string.h"
#include "stdio.h"
#include "pythread.h"
#include "stddef.h"
#include "windows.h"
#include "python.h"
#include "wchar.h"
#include "evntcons.h"
#include "evntrace.h"
#include "stdlib.h"
#include "tdh.h"
#ifdef _OPENMP
#include <omp.h>
#endif /* _OPENMP */

#ifdef PYREX_WITHOUT_ASSERTIONS
#define CYTHON_WITHOUT_ASSERTIONS
#endif

#ifndef CYTHON_UNUSED
# if defined(__GNUC__)
#   if !(defined(__cplusplus)) || (__GNUC__ > 3 || (__GNUC__ == 3 && __GNUC_MINOR__ >= 4))
#     define CYTHON_UNUSED __attribute__ ((__unused__))
#   else
#     define CYTHON_UNUSED
#   endif
# elif defined(__ICC) || (defined(__INTEL_COMPILER) && !defined(_MSC_VER))
#   define CYTHON_UNUSED __attribute__ ((__unused__))
# else
#   define CYTHON_UNUSED
# endif
#endif
#ifndef CYTHON_NCP_UNUSED
# if CYTHON_COMPILING_IN_CPYTHON
#  define CYTHON_NCP_UNUSED
# else
#  define CYTHON_NCP_UNUSED CYTHON_UNUSED
# endif
#endif
typedef struct {PyObject **p; char *s; const Py_ssize_t n; const char* encoding;
                const char is_unicode; const char is_str; const char intern; } __Pyx_StringTabEntry;

#define __PYX_DEFAULT_STRING_ENCODING_IS_ASCII 0
#define __PYX_DEFAULT_STRING_ENCODING_IS_DEFAULT 0
#define __PYX_DEFAULT_STRING_ENCODING ""
#define __Pyx_PyObject_FromString __Pyx_PyBytes_FromString
#define __Pyx_PyObject_FromStringAndSize __Pyx_PyBytes_FromStringAndSize
#define __Pyx_uchar_cast(c) ((unsigned char)c)
#define __Pyx_long_cast(x) ((long)x)
#define __Pyx_fits_Py_ssize_t(v, type, is_signed)  (\
    (sizeof(type) < sizeof(Py_ssize_t))  ||\
    (sizeof(type) > sizeof(Py_ssize_t) &&\
          likely(v < (type)PY_SSIZE_T_MAX ||\
                 v == (type)PY_SSIZE_T_MAX)  &&\
          (!is_signed || likely(v > (type)PY_SSIZE_T_MIN ||\
                                v == (type)PY_SSIZE_T_MIN)))  ||\
    (sizeof(type) == sizeof(Py_ssize_t) &&\
          (is_signed || likely(v < (type)PY_SSIZE_T_MAX ||\
                               v == (type)PY_SSIZE_T_MAX)))  )
#if defined (__cplusplus) && __cplusplus >= 201103L
    #include <cstdlib>
    #define __Pyx_sst_abs(value) std::abs(value)
#elif SIZEOF_INT >= SIZEOF_SIZE_T
    #define __Pyx_sst_abs(value) abs(value)
#elif SIZEOF_LONG >= SIZEOF_SIZE_T
    #define __Pyx_sst_abs(value) labs(value)
#elif defined (_MSC_VER) && defined (_M_X64)
    #define __Pyx_sst_abs(value) _abs64(value)
#elif defined (__STDC_VERSION__) && __STDC_VERSION__ >= 199901L
    #define __Pyx_sst_abs(value) llabs(value)
#elif defined (__GNUC__)
    #define __Pyx_sst_abs(value) __builtin_llabs(value)
#else
    #define __Pyx_sst_abs(value) ((value<0) ? -value : value)
#endif
static CYTHON_INLINE char* __Pyx_PyObject_AsString(PyObject*);
static CYTHON_INLINE char* __Pyx_PyObject_AsStringAndSize(PyObject*, Py_ssize_t* length);
#define __Pyx_PyByteArray_FromString(s) PyByteArray_FromStringAndSize((const char*)s, strlen((const char*)s))
#define __Pyx_PyByteArray_FromStringAndSize(s, l) PyByteArray_FromStringAndSize((const char*)s, l)
#define __Pyx_PyBytes_FromString        PyBytes_FromString
#define __Pyx_PyBytes_FromStringAndSize PyBytes_FromStringAndSize
static CYTHON_INLINE PyObject* __Pyx_PyUnicode_FromString(const char*);
#if PY_MAJOR_VERSION < 3
    #define __Pyx_PyStr_FromString        __Pyx_PyBytes_FromString
    #define __Pyx_PyStr_FromStringAndSize __Pyx_PyBytes_FromStringAndSize
#else
    #define __Pyx_PyStr_FromString        __Pyx_PyUnicode_FromString
    #define __Pyx_PyStr_FromStringAndSize __Pyx_PyUnicode_FromStringAndSize
#endif
#define __Pyx_PyObject_AsSString(s)    ((signed char*) __Pyx_PyObject_AsString(s))
#define __Pyx_PyObject_AsUString(s)    ((unsigned char*) __Pyx_PyObject_AsString(s))
#define __Pyx_PyObject_FromCString(s)  __Pyx_PyObject_FromString((const char*)s)
#define __Pyx_PyBytes_FromCString(s)   __Pyx_PyBytes_FromString((const char*)s)
#define __Pyx_PyByteArray_FromCString(s)   __Pyx_PyByteArray_FromString((const char*)s)
#define __Pyx_PyStr_FromCString(s)     __Pyx_PyStr_FromString((const char*)s)
#define __Pyx_PyUnicode_FromCString(s) __Pyx_PyUnicode_FromString((const char*)s)
#if PY_MAJOR_VERSION < 3
static CYTHON_INLINE size_t __Pyx_Py_UNICODE_strlen(const Py_UNICODE *u)
{
    const Py_UNICODE *u_end = u;
    while (*u_end++) ;
    return (size_t)(u_end - u - 1);
}
#else
#define __Pyx_Py_UNICODE_strlen Py_UNICODE_strlen
#endif
#define __Pyx_PyUnicode_FromUnicode(u)       PyUnicode_FromUnicode(u, __Pyx_Py_UNICODE_strlen(u))
#define __Pyx_PyUnicode_FromUnicodeAndLength PyUnicode_FromUnicode
#define __Pyx_PyUnicode_AsUnicode            PyUnicode_AsUnicode
#define __Pyx_NewRef(obj) (Py_INCREF(obj), obj)
#define __Pyx_Owned_Py_None(b) __Pyx_NewRef(Py_None)
#define __Pyx_PyBool_FromLong(b) ((b) ? __Pyx_NewRef(Py_True) : __Pyx_NewRef(Py_False))
static CYTHON_INLINE int __Pyx_PyObject_IsTrue(PyObject*);
static CYTHON_INLINE PyObject* __Pyx_PyNumber_Int(PyObject* x);
static CYTHON_INLINE Py_ssize_t __Pyx_PyIndex_AsSsize_t(PyObject*);
static CYTHON_INLINE PyObject * __Pyx_PyInt_FromSize_t(size_t);
#if CYTHON_COMPILING_IN_CPYTHON
#define __pyx_PyFloat_AsDouble(x) (PyFloat_CheckExact(x) ? PyFloat_AS_DOUBLE(x) : PyFloat_AsDouble(x))
#else
#define __pyx_PyFloat_AsDouble(x) PyFloat_AsDouble(x)
#endif
#define __pyx_PyFloat_AsFloat(x) ((float) __pyx_PyFloat_AsDouble(x))
#if PY_MAJOR_VERSION < 3 && __PYX_DEFAULT_STRING_ENCODING_IS_ASCII
static int __Pyx_sys_getdefaultencoding_not_ascii;
static int __Pyx_init_sys_getdefaultencoding_params(void) {
    PyObject* sys;
    PyObject* default_encoding = NULL;
    PyObject* ascii_chars_u = NULL;
    PyObject* ascii_chars_b = NULL;
    const char* default_encoding_c;
    sys = PyImport_ImportModule("sys");
    if (!sys) goto bad;
    default_encoding = PyObject_CallMethod(sys, (char*) "getdefaultencoding", NULL);
    Py_DECREF(sys);
    if (!default_encoding) goto bad;
    default_encoding_c = PyBytes_AsString(default_encoding);
    if (!default_encoding_c) goto bad;
    if (strcmp(default_encoding_c, "ascii") == 0) {
        __Pyx_sys_getdefaultencoding_not_ascii = 0;
    } else {
        char ascii_chars[128];
        int c;
        for (c = 0; c < 128; c++) {
            ascii_chars[c] = c;
        }
        __Pyx_sys_getdefaultencoding_not_ascii = 1;
        ascii_chars_u = PyUnicode_DecodeASCII(ascii_chars, 128, NULL);
        if (!ascii_chars_u) goto bad;
        ascii_chars_b = PyUnicode_AsEncodedString(ascii_chars_u, default_encoding_c, NULL);
        if (!ascii_chars_b || !PyBytes_Check(ascii_chars_b) || memcmp(ascii_chars, PyBytes_AS_STRING(ascii_chars_b), 128) != 0) {
            PyErr_Format(
                PyExc_ValueError,
                "This module compiled with c_string_encoding=ascii, but default encoding '%.200s' is not a superset of ascii.",
                default_encoding_c);
            goto bad;
        }
        Py_DECREF(ascii_chars_u);
        Py_DECREF(ascii_chars_b);
    }
    Py_DECREF(default_encoding);
    return 0;
bad:
    Py_XDECREF(default_encoding);
    Py_XDECREF(ascii_chars_u);
    Py_XDECREF(ascii_chars_b);
    return -1;
}
#endif
#if __PYX_DEFAULT_STRING_ENCODING_IS_DEFAULT && PY_MAJOR_VERSION >= 3
#define __Pyx_PyUnicode_FromStringAndSize(c_str, size) PyUnicode_DecodeUTF8(c_str, size, NULL)
#else
#define __Pyx_PyUnicode_FromStringAndSize(c_str, size) PyUnicode_Decode(c_str, size, __PYX_DEFAULT_STRING_ENCODING, NULL)
#if __PYX_DEFAULT_STRING_ENCODING_IS_DEFAULT
static char* __PYX_DEFAULT_STRING_ENCODING;
static int __Pyx_init_sys_getdefaultencoding_params(void) {
    PyObject* sys;
    PyObject* default_encoding = NULL;
    char* default_encoding_c;
    sys = PyImport_ImportModule("sys");
    if (!sys) goto bad;
    default_encoding = PyObject_CallMethod(sys, (char*) (const char*) "getdefaultencoding", NULL);
    Py_DECREF(sys);
    if (!default_encoding) goto bad;
    default_encoding_c = PyBytes_AsString(default_encoding);
    if (!default_encoding_c) goto bad;
    __PYX_DEFAULT_STRING_ENCODING = (char*) malloc(strlen(default_encoding_c));
    if (!__PYX_DEFAULT_STRING_ENCODING) goto bad;
    strcpy(__PYX_DEFAULT_STRING_ENCODING, default_encoding_c);
    Py_DECREF(default_encoding);
    return 0;
bad:
    Py_XDECREF(default_encoding);
    return -1;
}
#endif
#endif


/* Test for GCC > 2.95 */
#if defined(__GNUC__)     && (__GNUC__ > 2 || (__GNUC__ == 2 && (__GNUC_MINOR__ > 95)))
  #define likely(x)   __builtin_expect(!!(x), 1)
  #define unlikely(x) __builtin_expect(!!(x), 0)
#else /* !__GNUC__ or GCC < 2.95 */
  #define likely(x)   (x)
  #define unlikely(x) (x)
#endif /* __GNUC__ */

static PyObject *__pyx_m;
static PyObject *__pyx_d;
static PyObject *__pyx_b;
static PyObject *__pyx_empty_tuple;
static PyObject *__pyx_empty_bytes;
static int __pyx_lineno;
static int __pyx_clineno = 0;
static const char * __pyx_cfilenm= __FILE__;
static const char *__pyx_filename;


static const char *__pyx_f[] = {
  "kstream\\kstreamc.pyx",
  "type.pxd",
  "bool.pxd",
  "complex.pxd",
};

/*--- Type declarations ---*/
struct __pyx_obj_8kstreamc_KEventStreamCollector;
struct __pyx_obj_8kstreamc___pyx_scope_struct__add_pid_filter;

/* "kstreamc.pyx":32
 * from kstream.ktypedefs cimport *
 * 
 * cdef enum:             # <<<<<<<<<<<<<<
 *     GUID_LEN = 39
 *     MAX_NAME = 256
 */
enum  {
  __pyx_e_8kstreamc_GUID_LEN = 39,
  __pyx_e_8kstreamc_MAX_NAME = 0x100
};

/* "kstreamc.pyx":48
 * 
 * 
 * cdef class KEventStreamCollector:             # <<<<<<<<<<<<<<
 *     """Kernel event stream collector.
 * 
 */
struct __pyx_obj_8kstreamc_KEventStreamCollector {
  PyObject_HEAD
  struct __pyx_vtabstruct_8kstreamc_KEventStreamCollector *__pyx_vtab;
  EVENT_TRACE_LOGFILE kevent_logfile;
  TRACEHANDLE handle;
  PyObject *next_kevt_callback;
  PyObject *on_kstream_open_callback;
  PyObject *klogger;
  PyObject *pointer_size;
  PyObject *property_regex;
  PyObject *ketypes;
  PyObject *own_pid;
  PyObject *kefilters;
  PyObject *exclude_pid_props;
  PyObject *exclude_from_filters;
  PyObject *logger;
  PyObject *file_handler;
  PyObject *interrupted;
  PyObject *thread_registry;
  PyObject *_filters;
  PyObject *_excluded_procs;
};


/* "kstreamc.pyx":167
 *         self.kefilters.append(kefilter)
 * 
 *     def add_pid_filter(self, pid):             # <<<<<<<<<<<<<<
 *         if pid:
 *             self._filters.append(lambda kpid: kpid != int(pid))
 */
struct __pyx_obj_8kstreamc___pyx_scope_struct__add_pid_filter {
  PyObject_HEAD
  PyObject *__pyx_v_pid;
};



/* "kstreamc.pyx":48
 * 
 * 
 * cdef class KEventStreamCollector:             # <<<<<<<<<<<<<<
 *     """Kernel event stream collector.
 * 
 */

struct __pyx_vtabstruct_8kstreamc_KEventStreamCollector {
  PyObject *(*process_kevent_callback)(struct __pyx_obj_8kstreamc_KEventStreamCollector *, EVENT_RECORD *);
  void (*_process_kevent)(struct __pyx_obj_8kstreamc_KEventStreamCollector *, EVENT_RECORD *);
  PyObject *(*_free_buffers)(struct __pyx_obj_8kstreamc_KEventStreamCollector *, TRACE_EVENT_INFO *, BYTE *);
  PyObject *(*_parse_property)(struct __pyx_obj_8kstreamc_KEventStreamCollector *, USHORT, USHORT, BYTE *);
  PyObject *(*_lookup_sid)(struct __pyx_obj_8kstreamc_KEventStreamCollector *, BYTE *, BOOL);
  PyObject *(*_assemble_type)(struct __pyx_obj_8kstreamc_KEventStreamCollector *, GUID, UCHAR);
  PyObject *(*_filetime_to_systime)(struct __pyx_obj_8kstreamc_KEventStreamCollector *, EVENT_HEADER);
  PyObject *(*_exclude_kevent)(struct __pyx_obj_8kstreamc_KEventStreamCollector *, PyObject *, PyObject *);
  PyObject *(*_aggregate_info)(struct __pyx_obj_8kstreamc_KEventStreamCollector *, EVENT_RECORD *, PyObject *, PyObject *);
};
static struct __pyx_vtabstruct_8kstreamc_KEventStreamCollector *__pyx_vtabptr_8kstreamc_KEventStreamCollector;

/* --- Runtime support code (head) --- */
#ifndef CYTHON_REFNANNY
  #define CYTHON_REFNANNY 0
#endif
#if CYTHON_REFNANNY
  typedef struct {
    void (*INCREF)(void*, PyObject*, int);
    void (*DECREF)(void*, PyObject*, int);
    void (*GOTREF)(void*, PyObject*, int);
    void (*GIVEREF)(void*, PyObject*, int);
    void* (*SetupContext)(const char*, int, const char*);
    void (*FinishContext)(void**);
  } __Pyx_RefNannyAPIStruct;
  static __Pyx_RefNannyAPIStruct *__Pyx_RefNanny = NULL;
  static __Pyx_RefNannyAPIStruct *__Pyx_RefNannyImportAPI(const char *modname);
  #define __Pyx_RefNannyDeclarations void *__pyx_refnanny = NULL;
#ifdef WITH_THREAD
  #define __Pyx_RefNannySetupContext(name, acquire_gil)\
          if (acquire_gil) {\
              PyGILState_STATE __pyx_gilstate_save = PyGILState_Ensure();\
              __pyx_refnanny = __Pyx_RefNanny->SetupContext((name), __LINE__, __FILE__);\
              PyGILState_Release(__pyx_gilstate_save);\
          } else {\
              __pyx_refnanny = __Pyx_RefNanny->SetupContext((name), __LINE__, __FILE__);\
          }
#else
  #define __Pyx_RefNannySetupContext(name, acquire_gil)\
          __pyx_refnanny = __Pyx_RefNanny->SetupContext((name), __LINE__, __FILE__)
#endif
  #define __Pyx_RefNannyFinishContext()\
          __Pyx_RefNanny->FinishContext(&__pyx_refnanny)
  #define __Pyx_INCREF(r)  __Pyx_RefNanny->INCREF(__pyx_refnanny, (PyObject *)(r), __LINE__)
  #define __Pyx_DECREF(r)  __Pyx_RefNanny->DECREF(__pyx_refnanny, (PyObject *)(r), __LINE__)
  #define __Pyx_GOTREF(r)  __Pyx_RefNanny->GOTREF(__pyx_refnanny, (PyObject *)(r), __LINE__)
  #define __Pyx_GIVEREF(r) __Pyx_RefNanny->GIVEREF(__pyx_refnanny, (PyObject *)(r), __LINE__)
  #define __Pyx_XINCREF(r)  do { if((r) != NULL) {__Pyx_INCREF(r); }} while(0)
  #define __Pyx_XDECREF(r)  do { if((r) != NULL) {__Pyx_DECREF(r); }} while(0)
  #define __Pyx_XGOTREF(r)  do { if((r) != NULL) {__Pyx_GOTREF(r); }} while(0)
  #define __Pyx_XGIVEREF(r) do { if((r) != NULL) {__Pyx_GIVEREF(r);}} while(0)
#else
  #define __Pyx_RefNannyDeclarations
  #define __Pyx_RefNannySetupContext(name, acquire_gil)
  #define __Pyx_RefNannyFinishContext()
  #define __Pyx_INCREF(r) Py_INCREF(r)
  #define __Pyx_DECREF(r) Py_DECREF(r)
  #define __Pyx_GOTREF(r)
  #define __Pyx_GIVEREF(r)
  #define __Pyx_XINCREF(r) Py_XINCREF(r)
  #define __Pyx_XDECREF(r) Py_XDECREF(r)
  #define __Pyx_XGOTREF(r)
  #define __Pyx_XGIVEREF(r)
#endif
#define __Pyx_XDECREF_SET(r, v) do {\
        PyObject *tmp = (PyObject *) r;\
        r = v; __Pyx_XDECREF(tmp);\
    } while (0)
#define __Pyx_DECREF_SET(r, v) do {\
        PyObject *tmp = (PyObject *) r;\
        r = v; __Pyx_DECREF(tmp);\
    } while (0)
#define __Pyx_CLEAR(r)    do { PyObject* tmp = ((PyObject*)(r)); r = NULL; __Pyx_DECREF(tmp);} while(0)
#define __Pyx_XCLEAR(r)   do { if((r) != NULL) {PyObject* tmp = ((PyObject*)(r)); r = NULL; __Pyx_DECREF(tmp);}} while(0)

#if CYTHON_COMPILING_IN_CPYTHON
static CYTHON_INLINE PyObject* __Pyx_PyObject_GetAttrStr(PyObject* obj, PyObject* attr_name) {
    PyTypeObject* tp = Py_TYPE(obj);
    if (likely(tp->tp_getattro))
        return tp->tp_getattro(obj, attr_name);
#if PY_MAJOR_VERSION < 3
    if (likely(tp->tp_getattr))
        return tp->tp_getattr(obj, PyString_AS_STRING(attr_name));
#endif
    return PyObject_GetAttr(obj, attr_name);
}
#else
#define __Pyx_PyObject_GetAttrStr(o,n) PyObject_GetAttr(o,n)
#endif

static PyObject *__Pyx_GetBuiltinName(PyObject *name);

static void __Pyx_RaiseArgtupleInvalid(const char* func_name, int exact,
    Py_ssize_t num_min, Py_ssize_t num_max, Py_ssize_t num_found);

static void __Pyx_RaiseDoubleKeywordsError(const char* func_name, PyObject* kw_name);

static int __Pyx_ParseOptionalKeywords(PyObject *kwds, PyObject **argnames[],\
    PyObject *kwds2, PyObject *values[], Py_ssize_t num_pos_args,\
    const char* function_name);

static CYTHON_INLINE PyObject *__Pyx_GetModuleGlobalName(PyObject *name);

#if CYTHON_COMPILING_IN_CPYTHON
static CYTHON_INLINE PyObject* __Pyx_PyObject_Call(PyObject *func, PyObject *arg, PyObject *kw);
#else
#define __Pyx_PyObject_Call(func, arg, kw) PyObject_Call(func, arg, kw)
#endif

#if CYTHON_COMPILING_IN_CPYTHON
static CYTHON_INLINE PyObject* __Pyx_PyObject_CallMethO(PyObject *func, PyObject *arg);
#endif

static CYTHON_INLINE PyObject* __Pyx_PyObject_CallOneArg(PyObject *func, PyObject *arg);

#if CYTHON_COMPILING_IN_CPYTHON
static CYTHON_INLINE PyObject* __Pyx_PyObject_CallNoArg(PyObject *func);
#else
#define __Pyx_PyObject_CallNoArg(func) __Pyx_PyObject_Call(func, __pyx_empty_tuple, NULL)
#endif

#if CYTHON_COMPILING_IN_CPYTHON && PY_VERSION_HEX >= 0x02070000
static CYTHON_INLINE PyObject* __Pyx_PyObject_LookupSpecial(PyObject* obj, PyObject* attr_name) {
    PyObject *res;
    PyTypeObject *tp = Py_TYPE(obj);
#if PY_MAJOR_VERSION < 3
    if (unlikely(PyInstance_Check(obj)))
        return __Pyx_PyObject_GetAttrStr(obj, attr_name);
#endif
    res = _PyType_Lookup(tp, attr_name);
    if (likely(res)) {
        descrgetfunc f = Py_TYPE(res)->tp_descr_get;
        if (!f) {
            Py_INCREF(res);
        } else {
            res = f(res, obj, (PyObject *)tp);
        }
    } else {
        PyErr_SetObject(PyExc_AttributeError, attr_name);
    }
    return res;
}
#else
#define __Pyx_PyObject_LookupSpecial(o,n) __Pyx_PyObject_GetAttrStr(o,n)
#endif

static CYTHON_INLINE void __Pyx_ExceptionSave(PyObject **type, PyObject **value, PyObject **tb);
static void __Pyx_ExceptionReset(PyObject *type, PyObject *value, PyObject *tb);

static int __Pyx_GetException(PyObject **type, PyObject **value, PyObject **tb);

static CYTHON_INLINE void __Pyx_ErrRestore(PyObject *type, PyObject *value, PyObject *tb);
static CYTHON_INLINE void __Pyx_ErrFetch(PyObject **type, PyObject **value, PyObject **tb);

static void __Pyx_Raise(PyObject *type, PyObject *value, PyObject *tb, PyObject *cause);

#if CYTHON_COMPILING_IN_CPYTHON
static CYTHON_INLINE int __Pyx_PyList_Append(PyObject* list, PyObject* x) {
    PyListObject* L = (PyListObject*) list;
    Py_ssize_t len = Py_SIZE(list);
    if (likely(L->allocated > len) & likely(len > (L->allocated >> 1))) {
        Py_INCREF(x);
        PyList_SET_ITEM(list, len, x);
        Py_SIZE(list) = len+1;
        return 0;
    }
    return PyList_Append(list, x);
}
#else
#define __Pyx_PyList_Append(L,x) PyList_Append(L,x)
#endif

static PyObject* __Pyx_PyObject_CallMethod1(PyObject* obj, PyObject* method_name, PyObject* arg);

static CYTHON_INLINE int __Pyx_PyObject_Append(PyObject* L, PyObject* x);

static CYTHON_INLINE void __Pyx_RaiseClosureNameError(const char *varname);

static PyTypeObject* __Pyx_FetchCommonType(PyTypeObject* type);

#define __Pyx_CyFunction_USED 1
#include <structmember.h>
#define __Pyx_CYFUNCTION_STATICMETHOD  0x01
#define __Pyx_CYFUNCTION_CLASSMETHOD   0x02
#define __Pyx_CYFUNCTION_CCLASS        0x04
#define __Pyx_CyFunction_GetClosure(f)\
    (((__pyx_CyFunctionObject *) (f))->func_closure)
#define __Pyx_CyFunction_GetClassObj(f)\
    (((__pyx_CyFunctionObject *) (f))->func_classobj)
#define __Pyx_CyFunction_Defaults(type, f)\
    ((type *)(((__pyx_CyFunctionObject *) (f))->defaults))
#define __Pyx_CyFunction_SetDefaultsGetter(f, g)\
    ((__pyx_CyFunctionObject *) (f))->defaults_getter = (g)
typedef struct {
    PyCFunctionObject func;
#if PY_VERSION_HEX < 0x030500A0
    PyObject *func_weakreflist;
#endif
    PyObject *func_dict;
    PyObject *func_name;
    PyObject *func_qualname;
    PyObject *func_doc;
    PyObject *func_globals;
    PyObject *func_code;
    PyObject *func_closure;
    PyObject *func_classobj;
    void *defaults;
    int defaults_pyobjects;
    int flags;
    PyObject *defaults_tuple;
    PyObject *defaults_kwdict;
    PyObject *(*defaults_getter)(PyObject *);
    PyObject *func_annotations;
} __pyx_CyFunctionObject;
static PyTypeObject *__pyx_CyFunctionType = 0;
#define __Pyx_CyFunction_NewEx(ml, flags, qualname, self, module, globals, code)\
    __Pyx_CyFunction_New(__pyx_CyFunctionType, ml, flags, qualname, self, module, globals, code)
static PyObject *__Pyx_CyFunction_New(PyTypeObject *, PyMethodDef *ml,
                                      int flags, PyObject* qualname,
                                      PyObject *self,
                                      PyObject *module, PyObject *globals,
                                      PyObject* code);
static CYTHON_INLINE void *__Pyx_CyFunction_InitDefaults(PyObject *m,
                                                         size_t size,
                                                         int pyobjects);
static CYTHON_INLINE void __Pyx_CyFunction_SetDefaultsTuple(PyObject *m,
                                                            PyObject *tuple);
static CYTHON_INLINE void __Pyx_CyFunction_SetDefaultsKwDict(PyObject *m,
                                                             PyObject *dict);
static CYTHON_INLINE void __Pyx_CyFunction_SetAnnotationsDict(PyObject *m,
                                                              PyObject *dict);
static int __pyx_CyFunction_init(void);

static CYTHON_INLINE int __Pyx_PySequence_ContainsTF(PyObject* item, PyObject* seq, int eq) {
    int result = PySequence_Contains(seq, item);
    return unlikely(result < 0) ? result : (result == (eq == Py_EQ));
}

static CYTHON_INLINE PyObject* __Pyx_decode_c_bytes(
         const char* cstring, Py_ssize_t length, Py_ssize_t start, Py_ssize_t stop,
         const char* encoding, const char* errors,
         PyObject* (*decode_func)(const char *s, Py_ssize_t size, const char *errors));

static CYTHON_INLINE PyObject* __Pyx_decode_bytes(
         PyObject* string, Py_ssize_t start, Py_ssize_t stop,
         const char* encoding, const char* errors,
         PyObject* (*decode_func)(const char *s, Py_ssize_t size, const char *errors)) {
    return __Pyx_decode_c_bytes(
        PyBytes_AS_STRING(string), PyBytes_GET_SIZE(string),
        start, stop, encoding, errors, decode_func);
}

#include <string.h>

static CYTHON_INLINE PyObject* __Pyx_decode_c_string(
         const char* cstring, Py_ssize_t start, Py_ssize_t stop,
         const char* encoding, const char* errors,
         PyObject* (*decode_func)(const char *s, Py_ssize_t size, const char *errors));

#if CYTHON_COMPILING_IN_CPYTHON
static PyObject* __Pyx_PyInt_EqObjC(PyObject *op1, PyObject *op2, long intval, int inplace);
#else
#define __Pyx_PyInt_EqObjC(op1, op2, intval, inplace)\
    PyObject_RichCompare(op1, op2, Py_EQ)
    #endif

static CYTHON_INLINE PyObject* __Pyx_PyObject_GetSlice(
        PyObject* obj, Py_ssize_t cstart, Py_ssize_t cstop,
        PyObject** py_start, PyObject** py_stop, PyObject** py_slice,
        int has_cstart, int has_cstop, int wraparound);

#define __Pyx_GetItemInt(o, i, type, is_signed, to_py_func, is_list, wraparound, boundscheck)\
    (__Pyx_fits_Py_ssize_t(i, type, is_signed) ?\
    __Pyx_GetItemInt_Fast(o, (Py_ssize_t)i, is_list, wraparound, boundscheck) :\
    (is_list ? (PyErr_SetString(PyExc_IndexError, "list index out of range"), (PyObject*)NULL) :\
               __Pyx_GetItemInt_Generic(o, to_py_func(i))))
#define __Pyx_GetItemInt_List(o, i, type, is_signed, to_py_func, is_list, wraparound, boundscheck)\
    (__Pyx_fits_Py_ssize_t(i, type, is_signed) ?\
    __Pyx_GetItemInt_List_Fast(o, (Py_ssize_t)i, wraparound, boundscheck) :\
    (PyErr_SetString(PyExc_IndexError, "list index out of range"), (PyObject*)NULL))
static CYTHON_INLINE PyObject *__Pyx_GetItemInt_List_Fast(PyObject *o, Py_ssize_t i,
                                                              int wraparound, int boundscheck);
#define __Pyx_GetItemInt_Tuple(o, i, type, is_signed, to_py_func, is_list, wraparound, boundscheck)\
    (__Pyx_fits_Py_ssize_t(i, type, is_signed) ?\
    __Pyx_GetItemInt_Tuple_Fast(o, (Py_ssize_t)i, wraparound, boundscheck) :\
    (PyErr_SetString(PyExc_IndexError, "tuple index out of range"), (PyObject*)NULL))
static CYTHON_INLINE PyObject *__Pyx_GetItemInt_Tuple_Fast(PyObject *o, Py_ssize_t i,
                                                              int wraparound, int boundscheck);
static CYTHON_INLINE PyObject *__Pyx_GetItemInt_Generic(PyObject *o, PyObject* j);
static CYTHON_INLINE PyObject *__Pyx_GetItemInt_Fast(PyObject *o, Py_ssize_t i,
                                                     int is_list, int wraparound, int boundscheck);

static int __Pyx_SetVtable(PyObject *dict, void *vtable);

static PyObject *__Pyx_Import(PyObject *name, PyObject *from_list, int level);

static PyObject* __Pyx_ImportFrom(PyObject* module, PyObject* name);

typedef struct {
    int code_line;
    PyCodeObject* code_object;
} __Pyx_CodeObjectCacheEntry;
struct __Pyx_CodeObjectCache {
    int count;
    int max_count;
    __Pyx_CodeObjectCacheEntry* entries;
};
static struct __Pyx_CodeObjectCache __pyx_code_cache = {0,0,NULL};
static int __pyx_bisect_code_objects(__Pyx_CodeObjectCacheEntry* entries, int count, int code_line);
static PyCodeObject *__pyx_find_code_object(int code_line);
static void __pyx_insert_code_object(int code_line, PyCodeObject* code_object);

static void __Pyx_AddTraceback(const char *funcname, int c_line,
                               int py_line, const char *filename);

static CYTHON_INLINE PyObject* __Pyx_PyInt_From_ULONG(ULONG value);

static CYTHON_INLINE PyObject* __Pyx_PyInt_From_int(int value);

static CYTHON_INLINE PyObject* __Pyx_PyInt_From_UCHAR(UCHAR value);

static CYTHON_INLINE PyObject* __Pyx_PyInt_From_CHAR(CHAR value);

static CYTHON_INLINE PyObject* __Pyx_PyInt_From_BYTE(BYTE value);

static CYTHON_INLINE PyObject* __Pyx_PyInt_From_ULONGLONG(ULONGLONG value);

static CYTHON_INLINE PyObject* __Pyx_PyInt_From_SHORT(SHORT value);

static CYTHON_INLINE PyObject* __Pyx_PyInt_From_USHORT(USHORT value);

static CYTHON_INLINE PyObject* __Pyx_PyInt_From_LONG(LONG value);

static CYTHON_INLINE PyObject* __Pyx_PyInt_From_LONGLONG(LONGLONG value);

static CYTHON_INLINE PyObject* __Pyx_PyInt_From_DWORD(DWORD value);

static CYTHON_INLINE PyObject* __Pyx_PyInt_From_WORD(WORD value);

static CYTHON_INLINE PyObject* __Pyx_PyInt_From_long(long value);

static CYTHON_INLINE long __Pyx_PyInt_As_long(PyObject *);

static CYTHON_INLINE int __Pyx_PyInt_As_int(PyObject *);

static int __Pyx_check_binary_version(void);

#if !defined(__Pyx_PyIdentifier_FromString)
#if PY_MAJOR_VERSION < 3
  #define __Pyx_PyIdentifier_FromString(s) PyString_FromString(s)
#else
  #define __Pyx_PyIdentifier_FromString(s) PyUnicode_FromString(s)
#endif
#endif

static PyObject *__Pyx_ImportModule(const char *name);

static PyTypeObject *__Pyx_ImportType(const char *module_name, const char *class_name, size_t size, int strict);

static int __Pyx_InitStrings(__Pyx_StringTabEntry *t);

static PyObject *__pyx_f_8kstreamc_21KEventStreamCollector_process_kevent_callback(CYTHON_UNUSED struct __pyx_obj_8kstreamc_KEventStreamCollector *__pyx_v_self, EVENT_RECORD *__pyx_v_kevent_trace); /* proto*/
static void __pyx_f_8kstreamc_21KEventStreamCollector__process_kevent(struct __pyx_obj_8kstreamc_KEventStreamCollector *__pyx_v_self, EVENT_RECORD *__pyx_v_kevent_trace); /* proto*/
static PyObject *__pyx_f_8kstreamc_21KEventStreamCollector__free_buffers(CYTHON_UNUSED struct __pyx_obj_8kstreamc_KEventStreamCollector *__pyx_v_self, TRACE_EVENT_INFO *__pyx_v_info_buffer, BYTE *__pyx_v_property_buffer); /* proto*/
static PyObject *__pyx_f_8kstreamc_21KEventStreamCollector__parse_property(struct __pyx_obj_8kstreamc_KEventStreamCollector *__pyx_v_self, USHORT __pyx_v_in_type, USHORT __pyx_v_out_type, BYTE *__pyx_v_buf); /* proto*/
static PyObject *__pyx_f_8kstreamc_21KEventStreamCollector__lookup_sid(struct __pyx_obj_8kstreamc_KEventStreamCollector *__pyx_v_self, BYTE *__pyx_v_buf, BOOL __pyx_v_wbem_sid); /* proto*/
static PyObject *__pyx_f_8kstreamc_21KEventStreamCollector__assemble_type(struct __pyx_obj_8kstreamc_KEventStreamCollector *__pyx_v_self, GUID __pyx_v_guid, UCHAR __pyx_v_opcode); /* proto*/
static PyObject *__pyx_f_8kstreamc_21KEventStreamCollector__filetime_to_systime(CYTHON_UNUSED struct __pyx_obj_8kstreamc_KEventStreamCollector *__pyx_v_self, EVENT_HEADER __pyx_v_kevt_header); /* proto*/
static PyObject *__pyx_f_8kstreamc_21KEventStreamCollector__exclude_kevent(struct __pyx_obj_8kstreamc_KEventStreamCollector *__pyx_v_self, PyObject *__pyx_v_pid, PyObject *__pyx_v_tid); /* proto*/
static PyObject *__pyx_f_8kstreamc_21KEventStreamCollector__aggregate_info(CYTHON_UNUSED struct __pyx_obj_8kstreamc_KEventStreamCollector *__pyx_v_self, EVENT_RECORD *__pyx_v_kevent_trace, PyObject *__pyx_v_kevt_type, PyObject *__pyx_v_params); /* proto*/

/* Module declarations from 'cpython.version' */

/* Module declarations from '__builtin__' */

/* Module declarations from 'cpython.type' */
static PyTypeObject *__pyx_ptype_7cpython_4type_type = 0;

/* Module declarations from 'libc.string' */

/* Module declarations from 'libc.stdio' */

/* Module declarations from 'cpython.object' */

/* Module declarations from 'cpython.ref' */

/* Module declarations from 'cpython.exc' */

/* Module declarations from 'cpython.module' */

/* Module declarations from 'cpython.mem' */

/* Module declarations from 'cpython.tuple' */

/* Module declarations from 'cpython.list' */

/* Module declarations from 'cpython.sequence' */

/* Module declarations from 'cpython.mapping' */

/* Module declarations from 'cpython.iterator' */

/* Module declarations from 'cpython.number' */

/* Module declarations from 'cpython.int' */

/* Module declarations from '__builtin__' */

/* Module declarations from 'cpython.bool' */
static PyTypeObject *__pyx_ptype_7cpython_4bool_bool = 0;

/* Module declarations from 'cpython.long' */

/* Module declarations from 'cpython.float' */

/* Module declarations from '__builtin__' */

/* Module declarations from 'cpython.complex' */
static PyTypeObject *__pyx_ptype_7cpython_7complex_complex = 0;

/* Module declarations from 'cpython.string' */

/* Module declarations from 'cpython.unicode' */

/* Module declarations from 'cpython.dict' */

/* Module declarations from 'cpython.instance' */

/* Module declarations from 'cpython.function' */

/* Module declarations from 'cpython.method' */

/* Module declarations from 'cpython.weakref' */

/* Module declarations from 'cpython.getargs' */

/* Module declarations from 'cpython.pythread' */

/* Module declarations from 'cpython.pystate' */

/* Module declarations from 'cpython.cobject' */

/* Module declarations from 'cpython.oldbuffer' */

/* Module declarations from 'cpython.set' */

/* Module declarations from 'cpython.buffer' */

/* Module declarations from 'cpython.bytes' */

/* Module declarations from 'cpython.pycapsule' */

/* Module declarations from 'cpython' */

/* Module declarations from 'libc.stddef' */

/* Module declarations from 'kstream.ktypedefs' */

/* Module declarations from 'kstreamc' */
static PyTypeObject *__pyx_ptype_8kstreamc_KEventStreamCollector = 0;
static PyTypeObject *__pyx_ptype_8kstreamc___pyx_scope_struct__add_pid_filter = 0;
#define __Pyx_MODULE_NAME "kstreamc"
int __pyx_module_is_main_kstreamc = 0;

/* Implementation of 'kstreamc' */
static PyObject *__pyx_builtin_RuntimeError;
static PyObject *__pyx_builtin_Exception;
static PyObject *__pyx_builtin_KeyboardInterrupt;
static PyObject *__pyx_builtin_UnicodeDecodeError;
static PyObject *__pyx_builtin_hex;
static PyObject *__pyx_builtin_TypeError;
static char __pyx_k_0[] = "0";
static char __pyx_k_1[] = "_\\1";
static char __pyx_k_L[] = "!L";
static char __pyx_k_a[] = "a";
static char __pyx_k__2[] = "~";
static char __pyx_k__7[] = "";
static char __pyx_k_os[] = "os";
static char __pyx_k_re[] = "re";
static char __pyx_k_hex[] = "hex";
static char __pyx_k_pid[] = "pid";
static char __pyx_k_sub[] = "sub";
static char __pyx_k_exit[] = "__exit__";
static char __pyx_k_info[] = "info";
static char __pyx_k_join[] = "join";
static char __pyx_k_main[] = "__main__";
static char __pyx_k_mode[] = "mode";
static char __pyx_k_name[] = "__name__";
static char __pyx_k_pack[] = "pack";
static char __pyx_k_path[] = "path";
static char __pyx_k_test[] = "__test__";
static char __pyx_k_clear[] = "clear";
static char __pyx_k_enter[] = "__enter__";
static char __pyx_k_error[] = "error";
static char __pyx_k_htonl[] = "htonl";
static char __pyx_k_lower[] = "lower";
static char __pyx_k_ntohs[] = "ntohs";
static char __pyx_k_utf_8[] = "utf-8";
static char __pyx_k_Logger[] = "Logger";
static char __pyx_k_append[] = "append";
static char __pyx_k_getpid[] = "getpid";
static char __pyx_k_import[] = "__import__";
static char __pyx_k_name_2[] = "name";
static char __pyx_k_socket[] = "socket";
static char __pyx_k_struct[] = "struct";
static char __pyx_k_0_0_0_0[] = "0.0.0.0";
static char __pyx_k_compile[] = "compile";
static char __pyx_k_klogger[] = "klogger";
static char __pyx_k_logbook[] = "logbook";
static char __pyx_k_unknown[] = "unknown";
static char __pyx_k_fibratus[] = ".fibratus";
static char __pyx_k_kstreamc[] = "kstreamc";
static char __pyx_k_Exception[] = "Exception";
static char __pyx_k_TypeError[] = "TypeError";
static char __pyx_k_inet_ntoa[] = "inet_ntoa";
static char __pyx_k_parent_id[] = "parent_id";
static char __pyx_k_s_s_s_s_d[] = "%s-%s-%s-%s-%d";
static char __pyx_k_thread_id[] = "thread_id";
static char __pyx_k_traceback[] = "traceback";
static char __pyx_k_ENUM_IMAGE[] = "ENUM_IMAGE";
static char __pyx_k_expanduser[] = "expanduser";
static char __pyx_k_format_exc[] = "format_exc";
static char __pyx_k_get_thread[] = "get_thread";
static char __pyx_k_process_id[] = "process_id";
static char __pyx_k_pyx_vtable[] = "__pyx_vtable__";
static char __pyx_k_ENUM_THREAD[] = "ENUM_THREAD";
static char __pyx_k_FileHandler[] = "FileHandler";
static char __pyx_k_d_02d_02d_d[] = "%d:%02d:%02d.%d";
static char __pyx_k_ENUM_PROCESS[] = "ENUM_PROCESS";
static char __pyx_k_RuntimeError[] = "RuntimeError";
static char __pyx_k_fibratus_log[] = "fibratus.log";
static char __pyx_k_close_kstream[] = "close_kstream";
static char __pyx_k_PID_PARAM_NAME[] = "PID_PARAM_NAME";
static char __pyx_k_REG_CREATE_KCB[] = "REG_CREATE_KCB";
static char __pyx_k_REG_DELETE_KCB[] = "REG_DELETE_KCB";
static char __pyx_k_TID_PARAM_NAME[] = "TID_PARAM_NAME";
static char __pyx_k_thread_registry[] = "thread_registry";
static char __pyx_k_applicationbound[] = "applicationbound";
static char __pyx_k_KeyboardInterrupt[] = "KeyboardInterrupt";
static char __pyx_k_UnicodeDecodeError[] = "UnicodeDecodeError";
static char __pyx_k_a_z0_9_A_Z_A_Z_a_z[] = "((?<=[a-z0-9])[A-Z]|(?!^)[A-Z](?=[a-z]))";
static char __pyx_k_REGISTRY_KEVENT_GUID[] = "REGISTRY_KEVENT_GUID";
static char __pyx_k_Opening_kernel_event_stream[] = "Opening kernel event stream";
static char __pyx_k_add_pid_filter_locals_lambda[] = "add_pid_filter.<locals>.<lambda>";
static char __pyx_k_2cb15d1d_5fc1_11d2_abe1_00a0c911[] = "2cb15d1d-5fc1-11d2-abe1-00a0c911f518";
static char __pyx_k_3d6fa8d0_fe05_11d0_9dda_00c04fd7[] = "3d6fa8d0-fe05-11d0-9dda-00c04fd7ba7c";
static char __pyx_k_3d6fa8d1_fe05_11d0_9dda_00c04fd7[] = "3d6fa8d1-fe05-11d0-9dda-00c04fd7ba7c";
static char __pyx_k_ERROR_Unable_to_open_kernel_even[] = "ERROR - Unable to open kernel event stream. Error %s";
static char __pyx_k_ae53722e_c863_11d2_8659_00c04fa3[] = "ae53722e-c863-11d2-8659-00c04fa321a1";
static PyObject *__pyx_kp_s_0;
static PyObject *__pyx_kp_s_0_0_0_0;
static PyObject *__pyx_kp_s_1;
static PyObject *__pyx_kp_s_2cb15d1d_5fc1_11d2_abe1_00a0c911;
static PyObject *__pyx_kp_s_3d6fa8d0_fe05_11d0_9dda_00c04fd7;
static PyObject *__pyx_kp_s_3d6fa8d1_fe05_11d0_9dda_00c04fd7;
static PyObject *__pyx_n_s_ENUM_IMAGE;
static PyObject *__pyx_n_s_ENUM_PROCESS;
static PyObject *__pyx_n_s_ENUM_THREAD;
static PyObject *__pyx_kp_s_ERROR_Unable_to_open_kernel_even;
static PyObject *__pyx_n_s_Exception;
static PyObject *__pyx_n_s_FileHandler;
static PyObject *__pyx_n_s_KeyboardInterrupt;
static PyObject *__pyx_kp_s_L;
static PyObject *__pyx_n_s_Logger;
static PyObject *__pyx_kp_s_Opening_kernel_event_stream;
static PyObject *__pyx_n_s_PID_PARAM_NAME;
static PyObject *__pyx_n_s_REGISTRY_KEVENT_GUID;
static PyObject *__pyx_n_s_REG_CREATE_KCB;
static PyObject *__pyx_n_s_REG_DELETE_KCB;
static PyObject *__pyx_n_s_RuntimeError;
static PyObject *__pyx_n_s_TID_PARAM_NAME;
static PyObject *__pyx_n_s_TypeError;
static PyObject *__pyx_n_s_UnicodeDecodeError;
static PyObject *__pyx_kp_s__2;
static PyObject *__pyx_kp_s__7;
static PyObject *__pyx_n_s_a;
static PyObject *__pyx_kp_s_a_z0_9_A_Z_A_Z_a_z;
static PyObject *__pyx_n_s_add_pid_filter_locals_lambda;
static PyObject *__pyx_kp_s_ae53722e_c863_11d2_8659_00c04fa3;
static PyObject *__pyx_n_s_append;
static PyObject *__pyx_n_s_applicationbound;
static PyObject *__pyx_n_s_clear;
static PyObject *__pyx_n_s_close_kstream;
static PyObject *__pyx_n_s_compile;
static PyObject *__pyx_kp_s_d_02d_02d_d;
static PyObject *__pyx_n_s_enter;
static PyObject *__pyx_n_s_error;
static PyObject *__pyx_n_s_exit;
static PyObject *__pyx_n_s_expanduser;
static PyObject *__pyx_kp_s_fibratus;
static PyObject *__pyx_kp_s_fibratus_log;
static PyObject *__pyx_n_s_format_exc;
static PyObject *__pyx_n_s_get_thread;
static PyObject *__pyx_n_s_getpid;
static PyObject *__pyx_n_s_hex;
static PyObject *__pyx_n_s_htonl;
static PyObject *__pyx_n_s_import;
static PyObject *__pyx_n_s_inet_ntoa;
static PyObject *__pyx_n_s_info;
static PyObject *__pyx_n_s_join;
static PyObject *__pyx_n_s_klogger;
static PyObject *__pyx_n_s_kstreamc;
static PyObject *__pyx_n_s_logbook;
static PyObject *__pyx_n_s_lower;
static PyObject *__pyx_n_s_main;
static PyObject *__pyx_n_s_mode;
static PyObject *__pyx_n_s_name;
static PyObject *__pyx_n_s_name_2;
static PyObject *__pyx_n_s_ntohs;
static PyObject *__pyx_n_s_os;
static PyObject *__pyx_n_s_pack;
static PyObject *__pyx_n_s_parent_id;
static PyObject *__pyx_n_s_path;
static PyObject *__pyx_n_s_pid;
static PyObject *__pyx_n_s_process_id;
static PyObject *__pyx_n_s_pyx_vtable;
static PyObject *__pyx_n_s_re;
static PyObject *__pyx_kp_s_s_s_s_s_d;
static PyObject *__pyx_n_s_socket;
static PyObject *__pyx_n_s_struct;
static PyObject *__pyx_n_s_sub;
static PyObject *__pyx_n_s_test;
static PyObject *__pyx_n_s_thread_id;
static PyObject *__pyx_n_s_thread_registry;
static PyObject *__pyx_n_s_traceback;
static PyObject *__pyx_n_s_unknown;
static PyObject *__pyx_kp_s_utf_8;
static int __pyx_pf_8kstreamc_21KEventStreamCollector___init__(struct __pyx_obj_8kstreamc_KEventStreamCollector *__pyx_v_self, PyObject *__pyx_v_klogger, PyObject *__pyx_v_thread_registry); /* proto */
static PyObject *__pyx_pf_8kstreamc_21KEventStreamCollector_2open_kstream(struct __pyx_obj_8kstreamc_KEventStreamCollector *__pyx_v_self, PyObject *__pyx_v_callback); /* proto */
static PyObject *__pyx_pf_8kstreamc_21KEventStreamCollector_4set_kstream_open_callback(struct __pyx_obj_8kstreamc_KEventStreamCollector *__pyx_v_self, PyObject *__pyx_v_callback); /* proto */
static PyObject *__pyx_pf_8kstreamc_21KEventStreamCollector_6close_kstream(struct __pyx_obj_8kstreamc_KEventStreamCollector *__pyx_v_self); /* proto */
static PyObject *__pyx_pf_8kstreamc_21KEventStreamCollector_8add_kevent_filter(struct __pyx_obj_8kstreamc_KEventStreamCollector *__pyx_v_self, PyObject *__pyx_v_kefilter); /* proto */
static PyObject *__pyx_lambda_funcdef_lambda(PyObject *__pyx_self, PyObject *__pyx_v_kpid); /* proto */
static PyObject *__pyx_pf_8kstreamc_21KEventStreamCollector_10add_pid_filter(struct __pyx_obj_8kstreamc_KEventStreamCollector *__pyx_v_self, PyObject *__pyx_v_pid); /* proto */
static PyObject *__pyx_pf_8kstreamc_21KEventStreamCollector_12set_excluded_procs(struct __pyx_obj_8kstreamc_KEventStreamCollector *__pyx_v_self, PyObject *__pyx_v_excluded_procs); /* proto */
static PyObject *__pyx_pf_8kstreamc_21KEventStreamCollector_14clear_kefilters(struct __pyx_obj_8kstreamc_KEventStreamCollector *__pyx_v_self); /* proto */
static PyObject *__pyx_tp_new_8kstreamc_KEventStreamCollector(PyTypeObject *t, PyObject *a, PyObject *k); /*proto*/
static PyObject *__pyx_tp_new_8kstreamc___pyx_scope_struct__add_pid_filter(PyTypeObject *t, PyObject *a, PyObject *k); /*proto*/
static PyObject *__pyx_int_1;
static PyObject *__pyx_int_2;
static PyObject *__pyx_int_3;
static PyObject *__pyx_int_4;
static PyObject *__pyx_int_8;
static PyObject *__pyx_int_22;
static PyObject *__pyx_int_23;
static PyObject *__pyx_int_4294967295;
static PyObject *__pyx_int_neg_2;
static PyObject *__pyx_tuple_;
static PyObject *__pyx_slice__8;
static PyObject *__pyx_tuple__3;
static PyObject *__pyx_tuple__4;
static PyObject *__pyx_tuple__5;
static PyObject *__pyx_tuple__6;
static PyObject *__pyx_tuple__9;
static PyObject *__pyx_tuple__10;
static PyObject *__pyx_tuple__11;
static PyObject *__pyx_tuple__12;
static PyObject *__pyx_tuple__13;

/* "kstreamc.pyx":92
 *     cdef _excluded_procs
 * 
 *     def __init__(self, klogger, thread_registry):             # <<<<<<<<<<<<<<
 *         self.klogger = klogger
 *         self.handle = 0
 */

/* Python wrapper */
static int __pyx_pw_8kstreamc_21KEventStreamCollector_1__init__(PyObject *__pyx_v_self, PyObject *__pyx_args, PyObject *__pyx_kwds); /*proto*/
static int __pyx_pw_8kstreamc_21KEventStreamCollector_1__init__(PyObject *__pyx_v_self, PyObject *__pyx_args, PyObject *__pyx_kwds) {
  PyObject *__pyx_v_klogger = 0;
  PyObject *__pyx_v_thread_registry = 0;
  int __pyx_lineno = 0;
  const char *__pyx_filename = NULL;
  int __pyx_clineno = 0;
  int __pyx_r;
  __Pyx_RefNannyDeclarations
  __Pyx_RefNannySetupContext("__init__ (wrapper)", 0);
  {
    static PyObject **__pyx_pyargnames[] = {&__pyx_n_s_klogger,&__pyx_n_s_thread_registry,0};
    PyObject* values[2] = {0,0};
    if (unlikely(__pyx_kwds)) {
      Py_ssize_t kw_args;
      const Py_ssize_t pos_args = PyTuple_GET_SIZE(__pyx_args);
      switch (pos_args) {
        case  2: values[1] = PyTuple_GET_ITEM(__pyx_args, 1);
        case  1: values[0] = PyTuple_GET_ITEM(__pyx_args, 0);
        case  0: break;
        default: goto __pyx_L5_argtuple_error;
      }
      kw_args = PyDict_Size(__pyx_kwds);
      switch (pos_args) {
        case  0:
        if (likely((values[0] = PyDict_GetItem(__pyx_kwds, __pyx_n_s_klogger)) != 0)) kw_args--;
        else goto __pyx_L5_argtuple_error;
        case  1:
        if (likely((values[1] = PyDict_GetItem(__pyx_kwds, __pyx_n_s_thread_registry)) != 0)) kw_args--;
        else {
          __Pyx_RaiseArgtupleInvalid("__init__", 1, 2, 2, 1); {__pyx_filename = __pyx_f[0]; __pyx_lineno = 92; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
        }
      }
      if (unlikely(kw_args > 0)) {
        if (unlikely(__Pyx_ParseOptionalKeywords(__pyx_kwds, __pyx_pyargnames, 0, values, pos_args, "__init__") < 0)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 92; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
      }
    } else if (PyTuple_GET_SIZE(__pyx_args) != 2) {
      goto __pyx_L5_argtuple_error;
    } else {
      values[0] = PyTuple_GET_ITEM(__pyx_args, 0);
      values[1] = PyTuple_GET_ITEM(__pyx_args, 1);
    }
    __pyx_v_klogger = values[0];
    __pyx_v_thread_registry = values[1];
  }
  goto __pyx_L4_argument_unpacking_done;
  __pyx_L5_argtuple_error:;
  __Pyx_RaiseArgtupleInvalid("__init__", 1, 2, 2, PyTuple_GET_SIZE(__pyx_args)); {__pyx_filename = __pyx_f[0]; __pyx_lineno = 92; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
  __pyx_L3_error:;
  __Pyx_AddTraceback("kstreamc.KEventStreamCollector.__init__", __pyx_clineno, __pyx_lineno, __pyx_filename);
  __Pyx_RefNannyFinishContext();
  return -1;
  __pyx_L4_argument_unpacking_done:;
  __pyx_r = __pyx_pf_8kstreamc_21KEventStreamCollector___init__(((struct __pyx_obj_8kstreamc_KEventStreamCollector *)__pyx_v_self), __pyx_v_klogger, __pyx_v_thread_registry);

  /* function exit code */
  __Pyx_RefNannyFinishContext();
  return __pyx_r;
}

static int __pyx_pf_8kstreamc_21KEventStreamCollector___init__(struct __pyx_obj_8kstreamc_KEventStreamCollector *__pyx_v_self, PyObject *__pyx_v_klogger, PyObject *__pyx_v_thread_registry) {
  int __pyx_r;
  __Pyx_RefNannyDeclarations
  PyObject *__pyx_t_1 = NULL;
  char *__pyx_t_2;
  PyObject *__pyx_t_3 = NULL;
  PyObject *__pyx_t_4 = NULL;
  PyObject *__pyx_t_5 = NULL;
  PyObject *__pyx_t_6 = NULL;
  PyObject *__pyx_t_7 = NULL;
  Py_ssize_t __pyx_t_8;
  int __pyx_lineno = 0;
  const char *__pyx_filename = NULL;
  int __pyx_clineno = 0;
  __Pyx_RefNannySetupContext("__init__", 0);

  /* "kstreamc.pyx":93
 * 
 *     def __init__(self, klogger, thread_registry):
 *         self.klogger = klogger             # <<<<<<<<<<<<<<
 *         self.handle = 0
 *         self.next_kevt_callback = None
 */
  __Pyx_INCREF(__pyx_v_klogger);
  __Pyx_GIVEREF(__pyx_v_klogger);
  __Pyx_GOTREF(__pyx_v_self->klogger);
  __Pyx_DECREF(__pyx_v_self->klogger);
  __pyx_v_self->klogger = __pyx_v_klogger;

  /* "kstreamc.pyx":94
 *     def __init__(self, klogger, thread_registry):
 *         self.klogger = klogger
 *         self.handle = 0             # <<<<<<<<<<<<<<
 *         self.next_kevt_callback = None
 *         self.on_kstream_open_callback = None
 */
  __pyx_v_self->handle = 0;

  /* "kstreamc.pyx":95
 *         self.klogger = klogger
 *         self.handle = 0
 *         self.next_kevt_callback = None             # <<<<<<<<<<<<<<
 *         self.on_kstream_open_callback = None
 *         self.kevent_logfile.LoggerName = PyBytes_AsString(self.klogger)
 */
  __Pyx_INCREF(Py_None);
  __Pyx_GIVEREF(Py_None);
  __Pyx_GOTREF(__pyx_v_self->next_kevt_callback);
  __Pyx_DECREF(__pyx_v_self->next_kevt_callback);
  __pyx_v_self->next_kevt_callback = Py_None;

  /* "kstreamc.pyx":96
 *         self.handle = 0
 *         self.next_kevt_callback = None
 *         self.on_kstream_open_callback = None             # <<<<<<<<<<<<<<
 *         self.kevent_logfile.LoggerName = PyBytes_AsString(self.klogger)
 *         self.property_regex = re.compile('((?<=[a-z0-9])[A-Z]|(?!^)[A-Z](?=[a-z]))')
 */
  __Pyx_INCREF(Py_None);
  __Pyx_GIVEREF(Py_None);
  __Pyx_GOTREF(__pyx_v_self->on_kstream_open_callback);
  __Pyx_DECREF(__pyx_v_self->on_kstream_open_callback);
  __pyx_v_self->on_kstream_open_callback = Py_None;

  /* "kstreamc.pyx":97
 *         self.next_kevt_callback = None
 *         self.on_kstream_open_callback = None
 *         self.kevent_logfile.LoggerName = PyBytes_AsString(self.klogger)             # <<<<<<<<<<<<<<
 *         self.property_regex = re.compile('((?<=[a-z0-9])[A-Z]|(?!^)[A-Z](?=[a-z]))')
 *         self.pointer_size = 8
 */
  __pyx_t_1 = __pyx_v_self->klogger;
  __Pyx_INCREF(__pyx_t_1);
  __pyx_t_2 = PyBytes_AsString(__pyx_t_1); if (unlikely(__pyx_t_2 == NULL)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 97; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __pyx_v_self->kevent_logfile.LoggerName = __pyx_t_2;
  __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0;

  /* "kstreamc.pyx":98
 *         self.on_kstream_open_callback = None
 *         self.kevent_logfile.LoggerName = PyBytes_AsString(self.klogger)
 *         self.property_regex = re.compile('((?<=[a-z0-9])[A-Z]|(?!^)[A-Z](?=[a-z]))')             # <<<<<<<<<<<<<<
 *         self.pointer_size = 8
 *         self.ketypes = {}
 */
  __pyx_t_1 = __Pyx_GetModuleGlobalName(__pyx_n_s_re); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 98; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_1);
  __pyx_t_3 = __Pyx_PyObject_GetAttrStr(__pyx_t_1, __pyx_n_s_compile); if (unlikely(!__pyx_t_3)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 98; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_3);
  __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0;
  __pyx_t_1 = __Pyx_PyObject_Call(__pyx_t_3, __pyx_tuple_, NULL); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 98; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_1);
  __Pyx_DECREF(__pyx_t_3); __pyx_t_3 = 0;
  __Pyx_GIVEREF(__pyx_t_1);
  __Pyx_GOTREF(__pyx_v_self->property_regex);
  __Pyx_DECREF(__pyx_v_self->property_regex);
  __pyx_v_self->property_regex = __pyx_t_1;
  __pyx_t_1 = 0;

  /* "kstreamc.pyx":99
 *         self.kevent_logfile.LoggerName = PyBytes_AsString(self.klogger)
 *         self.property_regex = re.compile('((?<=[a-z0-9])[A-Z]|(?!^)[A-Z](?=[a-z]))')
 *         self.pointer_size = 8             # <<<<<<<<<<<<<<
 *         self.ketypes = {}
 *         self.kefilters = []
 */
  __Pyx_INCREF(__pyx_int_8);
  __Pyx_GIVEREF(__pyx_int_8);
  __Pyx_GOTREF(__pyx_v_self->pointer_size);
  __Pyx_DECREF(__pyx_v_self->pointer_size);
  __pyx_v_self->pointer_size = __pyx_int_8;

  /* "kstreamc.pyx":100
 *         self.property_regex = re.compile('((?<=[a-z0-9])[A-Z]|(?!^)[A-Z](?=[a-z]))')
 *         self.pointer_size = 8
 *         self.ketypes = {}             # <<<<<<<<<<<<<<
 *         self.kefilters = []
 *         self._filters = []
 */
  __pyx_t_1 = PyDict_New(); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 100; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_1);
  __Pyx_GIVEREF(__pyx_t_1);
  __Pyx_GOTREF(__pyx_v_self->ketypes);
  __Pyx_DECREF(__pyx_v_self->ketypes);
  __pyx_v_self->ketypes = __pyx_t_1;
  __pyx_t_1 = 0;

  /* "kstreamc.pyx":101
 *         self.pointer_size = 8
 *         self.ketypes = {}
 *         self.kefilters = []             # <<<<<<<<<<<<<<
 *         self._filters = []
 *         self._excluded_procs = []
 */
  __pyx_t_1 = PyList_New(0); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 101; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_1);
  __Pyx_GIVEREF(__pyx_t_1);
  __Pyx_GOTREF(__pyx_v_self->kefilters);
  __Pyx_DECREF(__pyx_v_self->kefilters);
  __pyx_v_self->kefilters = __pyx_t_1;
  __pyx_t_1 = 0;

  /* "kstreamc.pyx":102
 *         self.ketypes = {}
 *         self.kefilters = []
 *         self._filters = []             # <<<<<<<<<<<<<<
 *         self._excluded_procs = []
 *         self.exclude_pid_props = ['process_id', 'parent_id', 'pid']
 */
  __pyx_t_1 = PyList_New(0); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 102; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_1);
  __Pyx_GIVEREF(__pyx_t_1);
  __Pyx_GOTREF(__pyx_v_self->_filters);
  __Pyx_DECREF(__pyx_v_self->_filters);
  __pyx_v_self->_filters = __pyx_t_1;
  __pyx_t_1 = 0;

  /* "kstreamc.pyx":103
 *         self.kefilters = []
 *         self._filters = []
 *         self._excluded_procs = []             # <<<<<<<<<<<<<<
 *         self.exclude_pid_props = ['process_id', 'parent_id', 'pid']
 *         self.exclude_from_filters = [ENUM_PROCESS, ENUM_THREAD, ENUM_IMAGE, REG_CREATE_KCB, REG_DELETE_KCB]
 */
  __pyx_t_1 = PyList_New(0); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 103; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_1);
  __Pyx_GIVEREF(__pyx_t_1);
  __Pyx_GOTREF(__pyx_v_self->_excluded_procs);
  __Pyx_DECREF(__pyx_v_self->_excluded_procs);
  __pyx_v_self->_excluded_procs = __pyx_t_1;
  __pyx_t_1 = 0;

  /* "kstreamc.pyx":104
 *         self._filters = []
 *         self._excluded_procs = []
 *         self.exclude_pid_props = ['process_id', 'parent_id', 'pid']             # <<<<<<<<<<<<<<
 *         self.exclude_from_filters = [ENUM_PROCESS, ENUM_THREAD, ENUM_IMAGE, REG_CREATE_KCB, REG_DELETE_KCB]
 *         self.logger = Logger(KEventStreamCollector.__name__)
 */
  __pyx_t_1 = PyList_New(3); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 104; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_1);
  __Pyx_INCREF(__pyx_n_s_process_id);
  __Pyx_GIVEREF(__pyx_n_s_process_id);
  PyList_SET_ITEM(__pyx_t_1, 0, __pyx_n_s_process_id);
  __Pyx_INCREF(__pyx_n_s_parent_id);
  __Pyx_GIVEREF(__pyx_n_s_parent_id);
  PyList_SET_ITEM(__pyx_t_1, 1, __pyx_n_s_parent_id);
  __Pyx_INCREF(__pyx_n_s_pid);
  __Pyx_GIVEREF(__pyx_n_s_pid);
  PyList_SET_ITEM(__pyx_t_1, 2, __pyx_n_s_pid);
  __Pyx_GIVEREF(__pyx_t_1);
  __Pyx_GOTREF(__pyx_v_self->exclude_pid_props);
  __Pyx_DECREF(__pyx_v_self->exclude_pid_props);
  __pyx_v_self->exclude_pid_props = __pyx_t_1;
  __pyx_t_1 = 0;

  /* "kstreamc.pyx":105
 *         self._excluded_procs = []
 *         self.exclude_pid_props = ['process_id', 'parent_id', 'pid']
 *         self.exclude_from_filters = [ENUM_PROCESS, ENUM_THREAD, ENUM_IMAGE, REG_CREATE_KCB, REG_DELETE_KCB]             # <<<<<<<<<<<<<<
 *         self.logger = Logger(KEventStreamCollector.__name__)
 *         self.file_handler = FileHandler(os.path.join(os.path.expanduser('~'), '.fibratus', 'fibratus.log'), mode='a')
 */
  __pyx_t_1 = __Pyx_GetModuleGlobalName(__pyx_n_s_ENUM_PROCESS); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 105; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_1);
  __pyx_t_3 = __Pyx_GetModuleGlobalName(__pyx_n_s_ENUM_THREAD); if (unlikely(!__pyx_t_3)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 105; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_3);
  __pyx_t_4 = __Pyx_GetModuleGlobalName(__pyx_n_s_ENUM_IMAGE); if (unlikely(!__pyx_t_4)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 105; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_4);
  __pyx_t_5 = __Pyx_GetModuleGlobalName(__pyx_n_s_REG_CREATE_KCB); if (unlikely(!__pyx_t_5)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 105; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_5);
  __pyx_t_6 = __Pyx_GetModuleGlobalName(__pyx_n_s_REG_DELETE_KCB); if (unlikely(!__pyx_t_6)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 105; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_6);
  __pyx_t_7 = PyList_New(5); if (unlikely(!__pyx_t_7)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 105; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_7);
  __Pyx_GIVEREF(__pyx_t_1);
  PyList_SET_ITEM(__pyx_t_7, 0, __pyx_t_1);
  __Pyx_GIVEREF(__pyx_t_3);
  PyList_SET_ITEM(__pyx_t_7, 1, __pyx_t_3);
  __Pyx_GIVEREF(__pyx_t_4);
  PyList_SET_ITEM(__pyx_t_7, 2, __pyx_t_4);
  __Pyx_GIVEREF(__pyx_t_5);
  PyList_SET_ITEM(__pyx_t_7, 3, __pyx_t_5);
  __Pyx_GIVEREF(__pyx_t_6);
  PyList_SET_ITEM(__pyx_t_7, 4, __pyx_t_6);
  __pyx_t_1 = 0;
  __pyx_t_3 = 0;
  __pyx_t_4 = 0;
  __pyx_t_5 = 0;
  __pyx_t_6 = 0;
  __Pyx_GIVEREF(__pyx_t_7);
  __Pyx_GOTREF(__pyx_v_self->exclude_from_filters);
  __Pyx_DECREF(__pyx_v_self->exclude_from_filters);
  __pyx_v_self->exclude_from_filters = __pyx_t_7;
  __pyx_t_7 = 0;

  /* "kstreamc.pyx":106
 *         self.exclude_pid_props = ['process_id', 'parent_id', 'pid']
 *         self.exclude_from_filters = [ENUM_PROCESS, ENUM_THREAD, ENUM_IMAGE, REG_CREATE_KCB, REG_DELETE_KCB]
 *         self.logger = Logger(KEventStreamCollector.__name__)             # <<<<<<<<<<<<<<
 *         self.file_handler = FileHandler(os.path.join(os.path.expanduser('~'), '.fibratus', 'fibratus.log'), mode='a')
 *         self.own_pid = os.getpid()
 */
  __pyx_t_6 = __Pyx_GetModuleGlobalName(__pyx_n_s_Logger); if (unlikely(!__pyx_t_6)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 106; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_6);
  __pyx_t_5 = __Pyx_PyObject_GetAttrStr(((PyObject *)__pyx_ptype_8kstreamc_KEventStreamCollector), __pyx_n_s_name); if (unlikely(!__pyx_t_5)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 106; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_5);
  __pyx_t_4 = NULL;
  if (CYTHON_COMPILING_IN_CPYTHON && unlikely(PyMethod_Check(__pyx_t_6))) {
    __pyx_t_4 = PyMethod_GET_SELF(__pyx_t_6);
    if (likely(__pyx_t_4)) {
      PyObject* function = PyMethod_GET_FUNCTION(__pyx_t_6);
      __Pyx_INCREF(__pyx_t_4);
      __Pyx_INCREF(function);
      __Pyx_DECREF_SET(__pyx_t_6, function);
    }
  }
  if (!__pyx_t_4) {
    __pyx_t_7 = __Pyx_PyObject_CallOneArg(__pyx_t_6, __pyx_t_5); if (unlikely(!__pyx_t_7)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 106; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    __Pyx_DECREF(__pyx_t_5); __pyx_t_5 = 0;
    __Pyx_GOTREF(__pyx_t_7);
  } else {
    __pyx_t_3 = PyTuple_New(1+1); if (unlikely(!__pyx_t_3)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 106; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    __Pyx_GOTREF(__pyx_t_3);
    __Pyx_GIVEREF(__pyx_t_4); PyTuple_SET_ITEM(__pyx_t_3, 0, __pyx_t_4); __pyx_t_4 = NULL;
    __Pyx_GIVEREF(__pyx_t_5);
    PyTuple_SET_ITEM(__pyx_t_3, 0+1, __pyx_t_5);
    __pyx_t_5 = 0;
    __pyx_t_7 = __Pyx_PyObject_Call(__pyx_t_6, __pyx_t_3, NULL); if (unlikely(!__pyx_t_7)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 106; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    __Pyx_GOTREF(__pyx_t_7);
    __Pyx_DECREF(__pyx_t_3); __pyx_t_3 = 0;
  }
  __Pyx_DECREF(__pyx_t_6); __pyx_t_6 = 0;
  __Pyx_GIVEREF(__pyx_t_7);
  __Pyx_GOTREF(__pyx_v_self->logger);
  __Pyx_DECREF(__pyx_v_self->logger);
  __pyx_v_self->logger = __pyx_t_7;
  __pyx_t_7 = 0;

  /* "kstreamc.pyx":107
 *         self.exclude_from_filters = [ENUM_PROCESS, ENUM_THREAD, ENUM_IMAGE, REG_CREATE_KCB, REG_DELETE_KCB]
 *         self.logger = Logger(KEventStreamCollector.__name__)
 *         self.file_handler = FileHandler(os.path.join(os.path.expanduser('~'), '.fibratus', 'fibratus.log'), mode='a')             # <<<<<<<<<<<<<<
 *         self.own_pid = os.getpid()
 *         self.thread_registry = thread_registry
 */
  __pyx_t_7 = __Pyx_GetModuleGlobalName(__pyx_n_s_FileHandler); if (unlikely(!__pyx_t_7)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 107; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_7);
  __pyx_t_3 = __Pyx_GetModuleGlobalName(__pyx_n_s_os); if (unlikely(!__pyx_t_3)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 107; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_3);
  __pyx_t_5 = __Pyx_PyObject_GetAttrStr(__pyx_t_3, __pyx_n_s_path); if (unlikely(!__pyx_t_5)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 107; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_5);
  __Pyx_DECREF(__pyx_t_3); __pyx_t_3 = 0;
  __pyx_t_3 = __Pyx_PyObject_GetAttrStr(__pyx_t_5, __pyx_n_s_join); if (unlikely(!__pyx_t_3)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 107; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_3);
  __Pyx_DECREF(__pyx_t_5); __pyx_t_5 = 0;
  __pyx_t_5 = __Pyx_GetModuleGlobalName(__pyx_n_s_os); if (unlikely(!__pyx_t_5)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 107; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_5);
  __pyx_t_4 = __Pyx_PyObject_GetAttrStr(__pyx_t_5, __pyx_n_s_path); if (unlikely(!__pyx_t_4)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 107; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_4);
  __Pyx_DECREF(__pyx_t_5); __pyx_t_5 = 0;
  __pyx_t_5 = __Pyx_PyObject_GetAttrStr(__pyx_t_4, __pyx_n_s_expanduser); if (unlikely(!__pyx_t_5)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 107; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_5);
  __Pyx_DECREF(__pyx_t_4); __pyx_t_4 = 0;
  __pyx_t_4 = __Pyx_PyObject_Call(__pyx_t_5, __pyx_tuple__3, NULL); if (unlikely(!__pyx_t_4)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 107; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_4);
  __Pyx_DECREF(__pyx_t_5); __pyx_t_5 = 0;
  __pyx_t_5 = NULL;
  __pyx_t_8 = 0;
  if (CYTHON_COMPILING_IN_CPYTHON && likely(PyMethod_Check(__pyx_t_3))) {
    __pyx_t_5 = PyMethod_GET_SELF(__pyx_t_3);
    if (likely(__pyx_t_5)) {
      PyObject* function = PyMethod_GET_FUNCTION(__pyx_t_3);
      __Pyx_INCREF(__pyx_t_5);
      __Pyx_INCREF(function);
      __Pyx_DECREF_SET(__pyx_t_3, function);
      __pyx_t_8 = 1;
    }
  }
  __pyx_t_1 = PyTuple_New(3+__pyx_t_8); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 107; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_1);
  if (__pyx_t_5) {
    __Pyx_GIVEREF(__pyx_t_5); PyTuple_SET_ITEM(__pyx_t_1, 0, __pyx_t_5); __pyx_t_5 = NULL;
  }
  __Pyx_GIVEREF(__pyx_t_4);
  PyTuple_SET_ITEM(__pyx_t_1, 0+__pyx_t_8, __pyx_t_4);
  __Pyx_INCREF(__pyx_kp_s_fibratus);
  __Pyx_GIVEREF(__pyx_kp_s_fibratus);
  PyTuple_SET_ITEM(__pyx_t_1, 1+__pyx_t_8, __pyx_kp_s_fibratus);
  __Pyx_INCREF(__pyx_kp_s_fibratus_log);
  __Pyx_GIVEREF(__pyx_kp_s_fibratus_log);
  PyTuple_SET_ITEM(__pyx_t_1, 2+__pyx_t_8, __pyx_kp_s_fibratus_log);
  __pyx_t_4 = 0;
  __pyx_t_6 = __Pyx_PyObject_Call(__pyx_t_3, __pyx_t_1, NULL); if (unlikely(!__pyx_t_6)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 107; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_6);
  __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0;
  __Pyx_DECREF(__pyx_t_3); __pyx_t_3 = 0;
  __pyx_t_3 = PyTuple_New(1); if (unlikely(!__pyx_t_3)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 107; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_3);
  __Pyx_GIVEREF(__pyx_t_6);
  PyTuple_SET_ITEM(__pyx_t_3, 0, __pyx_t_6);
  __pyx_t_6 = 0;
  __pyx_t_6 = PyDict_New(); if (unlikely(!__pyx_t_6)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 107; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_6);
  if (PyDict_SetItem(__pyx_t_6, __pyx_n_s_mode, __pyx_n_s_a) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 107; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __pyx_t_1 = __Pyx_PyObject_Call(__pyx_t_7, __pyx_t_3, __pyx_t_6); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 107; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_1);
  __Pyx_DECREF(__pyx_t_7); __pyx_t_7 = 0;
  __Pyx_DECREF(__pyx_t_3); __pyx_t_3 = 0;
  __Pyx_DECREF(__pyx_t_6); __pyx_t_6 = 0;
  __Pyx_GIVEREF(__pyx_t_1);
  __Pyx_GOTREF(__pyx_v_self->file_handler);
  __Pyx_DECREF(__pyx_v_self->file_handler);
  __pyx_v_self->file_handler = __pyx_t_1;
  __pyx_t_1 = 0;

  /* "kstreamc.pyx":108
 *         self.logger = Logger(KEventStreamCollector.__name__)
 *         self.file_handler = FileHandler(os.path.join(os.path.expanduser('~'), '.fibratus', 'fibratus.log'), mode='a')
 *         self.own_pid = os.getpid()             # <<<<<<<<<<<<<<
 *         self.thread_registry = thread_registry
 *         self.interrupted = False
 */
  __pyx_t_6 = __Pyx_GetModuleGlobalName(__pyx_n_s_os); if (unlikely(!__pyx_t_6)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 108; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_6);
  __pyx_t_3 = __Pyx_PyObject_GetAttrStr(__pyx_t_6, __pyx_n_s_getpid); if (unlikely(!__pyx_t_3)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 108; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_3);
  __Pyx_DECREF(__pyx_t_6); __pyx_t_6 = 0;
  __pyx_t_6 = NULL;
  if (CYTHON_COMPILING_IN_CPYTHON && unlikely(PyMethod_Check(__pyx_t_3))) {
    __pyx_t_6 = PyMethod_GET_SELF(__pyx_t_3);
    if (likely(__pyx_t_6)) {
      PyObject* function = PyMethod_GET_FUNCTION(__pyx_t_3);
      __Pyx_INCREF(__pyx_t_6);
      __Pyx_INCREF(function);
      __Pyx_DECREF_SET(__pyx_t_3, function);
    }
  }
  if (__pyx_t_6) {
    __pyx_t_1 = __Pyx_PyObject_CallOneArg(__pyx_t_3, __pyx_t_6); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 108; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    __Pyx_DECREF(__pyx_t_6); __pyx_t_6 = 0;
  } else {
    __pyx_t_1 = __Pyx_PyObject_CallNoArg(__pyx_t_3); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 108; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  }
  __Pyx_GOTREF(__pyx_t_1);
  __Pyx_DECREF(__pyx_t_3); __pyx_t_3 = 0;
  __Pyx_GIVEREF(__pyx_t_1);
  __Pyx_GOTREF(__pyx_v_self->own_pid);
  __Pyx_DECREF(__pyx_v_self->own_pid);
  __pyx_v_self->own_pid = __pyx_t_1;
  __pyx_t_1 = 0;

  /* "kstreamc.pyx":109
 *         self.file_handler = FileHandler(os.path.join(os.path.expanduser('~'), '.fibratus', 'fibratus.log'), mode='a')
 *         self.own_pid = os.getpid()
 *         self.thread_registry = thread_registry             # <<<<<<<<<<<<<<
 *         self.interrupted = False
 * 
 */
  __Pyx_INCREF(__pyx_v_thread_registry);
  __Pyx_GIVEREF(__pyx_v_thread_registry);
  __Pyx_GOTREF(__pyx_v_self->thread_registry);
  __Pyx_DECREF(__pyx_v_self->thread_registry);
  __pyx_v_self->thread_registry = __pyx_v_thread_registry;

  /* "kstreamc.pyx":110
 *         self.own_pid = os.getpid()
 *         self.thread_registry = thread_registry
 *         self.interrupted = False             # <<<<<<<<<<<<<<
 * 
 *     def open_kstream(self, callback):
 */
  __Pyx_INCREF(Py_False);
  __Pyx_GIVEREF(Py_False);
  __Pyx_GOTREF(__pyx_v_self->interrupted);
  __Pyx_DECREF(__pyx_v_self->interrupted);
  __pyx_v_self->interrupted = Py_False;

  /* "kstreamc.pyx":92
 *     cdef _excluded_procs
 * 
 *     def __init__(self, klogger, thread_registry):             # <<<<<<<<<<<<<<
 *         self.klogger = klogger
 *         self.handle = 0
 */

  /* function exit code */
  __pyx_r = 0;
  goto __pyx_L0;
  __pyx_L1_error:;
  __Pyx_XDECREF(__pyx_t_1);
  __Pyx_XDECREF(__pyx_t_3);
  __Pyx_XDECREF(__pyx_t_4);
  __Pyx_XDECREF(__pyx_t_5);
  __Pyx_XDECREF(__pyx_t_6);
  __Pyx_XDECREF(__pyx_t_7);
  __Pyx_AddTraceback("kstreamc.KEventStreamCollector.__init__", __pyx_clineno, __pyx_lineno, __pyx_filename);
  __pyx_r = -1;
  __pyx_L0:;
  __Pyx_RefNannyFinishContext();
  return __pyx_r;
}

/* "kstreamc.pyx":112
 *         self.interrupted = False
 * 
 *     def open_kstream(self, callback):             # <<<<<<<<<<<<<<
 *         """Initializes the kernel event stream.
 * 
 */

/* Python wrapper */
static PyObject *__pyx_pw_8kstreamc_21KEventStreamCollector_3open_kstream(PyObject *__pyx_v_self, PyObject *__pyx_v_callback); /*proto*/
static char __pyx_doc_8kstreamc_21KEventStreamCollector_2open_kstream[] = "Initializes the kernel event stream.\n\n        Sets the event record callback and open\n        the trace to consume from kernel event\n        stream.\n\n        Parameters\n        ----------\n\n        callback: callable\n            A python method which is called\n            when kernel event is consumed successfully\n\n        ";
static PyObject *__pyx_pw_8kstreamc_21KEventStreamCollector_3open_kstream(PyObject *__pyx_v_self, PyObject *__pyx_v_callback) {
  PyObject *__pyx_r = 0;
  __Pyx_RefNannyDeclarations
  __Pyx_RefNannySetupContext("open_kstream (wrapper)", 0);
  __pyx_r = __pyx_pf_8kstreamc_21KEventStreamCollector_2open_kstream(((struct __pyx_obj_8kstreamc_KEventStreamCollector *)__pyx_v_self), ((PyObject *)__pyx_v_callback));

  /* function exit code */
  __Pyx_RefNannyFinishContext();
  return __pyx_r;
}

static PyObject *__pyx_pf_8kstreamc_21KEventStreamCollector_2open_kstream(struct __pyx_obj_8kstreamc_KEventStreamCollector *__pyx_v_self, PyObject *__pyx_v_callback) {
  PyObject *__pyx_v_status = NULL;
  PyObject *__pyx_r = NULL;
  __Pyx_RefNannyDeclarations
  PyObject *__pyx_t_1 = NULL;
  PyObject *__pyx_t_2 = NULL;
  PyObject *__pyx_t_3 = NULL;
  PyObject *__pyx_t_4 = NULL;
  PyObject *__pyx_t_5 = NULL;
  PyObject *__pyx_t_6 = NULL;
  PyObject *__pyx_t_7 = NULL;
  PyObject *__pyx_t_8 = NULL;
  PyObject *__pyx_t_9 = NULL;
  int __pyx_t_10;
  int __pyx_t_11;
  int __pyx_lineno = 0;
  const char *__pyx_filename = NULL;
  int __pyx_clineno = 0;
  __Pyx_RefNannySetupContext("open_kstream", 0);

  /* "kstreamc.pyx":127
 * 
 *         """
 *         self.next_kevt_callback = callback             # <<<<<<<<<<<<<<
 * 
 *         self.kevent_logfile.ProcessTraceMode = EVENT_TRACE_REAL_TIME_MODE | PROCESS_TRACE_MODE_EVENT_RECORD
 */
  __Pyx_INCREF(__pyx_v_callback);
  __Pyx_GIVEREF(__pyx_v_callback);
  __Pyx_GOTREF(__pyx_v_self->next_kevt_callback);
  __Pyx_DECREF(__pyx_v_self->next_kevt_callback);
  __pyx_v_self->next_kevt_callback = __pyx_v_callback;

  /* "kstreamc.pyx":129
 *         self.next_kevt_callback = callback
 * 
 *         self.kevent_logfile.ProcessTraceMode = EVENT_TRACE_REAL_TIME_MODE | PROCESS_TRACE_MODE_EVENT_RECORD             # <<<<<<<<<<<<<<
 *         self.kevent_logfile.EventRecordCallback = <PEVENT_RECORD_CALLBACK> self.process_kevent_callback
 *         # because `process_kevent` callback is the instance
 */
  __pyx_v_self->kevent_logfile.ProcessTraceMode = (EVENT_TRACE_REAL_TIME_MODE | PROCESS_TRACE_MODE_EVENT_RECORD);

  /* "kstreamc.pyx":130
 * 
 *         self.kevent_logfile.ProcessTraceMode = EVENT_TRACE_REAL_TIME_MODE | PROCESS_TRACE_MODE_EVENT_RECORD
 *         self.kevent_logfile.EventRecordCallback = <PEVENT_RECORD_CALLBACK> self.process_kevent_callback             # <<<<<<<<<<<<<<
 *         # because `process_kevent` callback is the instance
 *         # method and the ETW API expects a callback function with
 */
  __pyx_v_self->kevent_logfile.EventRecordCallback = ((PEVENT_RECORD_CALLBACK)((struct __pyx_vtabstruct_8kstreamc_KEventStreamCollector *)__pyx_v_self->__pyx_vtab)->process_kevent_callback);

  /* "kstreamc.pyx":136
 *         # an invalid context. We need to inject the reference
 *         # to this instance into `Context` member.
 *         self.kevent_logfile.Context = <PVOID> self             # <<<<<<<<<<<<<<
 * 
 *         with self.file_handler.applicationbound():
 */
  __pyx_v_self->kevent_logfile.Context = ((PVOID)__pyx_v_self);

  /* "kstreamc.pyx":138
 *         self.kevent_logfile.Context = <PVOID> self
 * 
 *         with self.file_handler.applicationbound():             # <<<<<<<<<<<<<<
 *             self.logger.info('Opening kernel event stream')
 *         self.handle = OpenTrace(&self.kevent_logfile)
 */
  /*with:*/ {
    __pyx_t_2 = __Pyx_PyObject_GetAttrStr(__pyx_v_self->file_handler, __pyx_n_s_applicationbound); if (unlikely(!__pyx_t_2)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 138; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    __Pyx_GOTREF(__pyx_t_2);
    __pyx_t_3 = NULL;
    if (CYTHON_COMPILING_IN_CPYTHON && likely(PyMethod_Check(__pyx_t_2))) {
      __pyx_t_3 = PyMethod_GET_SELF(__pyx_t_2);
      if (likely(__pyx_t_3)) {
        PyObject* function = PyMethod_GET_FUNCTION(__pyx_t_2);
        __Pyx_INCREF(__pyx_t_3);
        __Pyx_INCREF(function);
        __Pyx_DECREF_SET(__pyx_t_2, function);
      }
    }
    if (__pyx_t_3) {
      __pyx_t_1 = __Pyx_PyObject_CallOneArg(__pyx_t_2, __pyx_t_3); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 138; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
      __Pyx_DECREF(__pyx_t_3); __pyx_t_3 = 0;
    } else {
      __pyx_t_1 = __Pyx_PyObject_CallNoArg(__pyx_t_2); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 138; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    }
    __Pyx_GOTREF(__pyx_t_1);
    __Pyx_DECREF(__pyx_t_2); __pyx_t_2 = 0;
    __pyx_t_4 = __Pyx_PyObject_LookupSpecial(__pyx_t_1, __pyx_n_s_exit); if (unlikely(!__pyx_t_4)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 138; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    __Pyx_GOTREF(__pyx_t_4);
    __pyx_t_3 = __Pyx_PyObject_LookupSpecial(__pyx_t_1, __pyx_n_s_enter); if (unlikely(!__pyx_t_3)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 138; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
    __Pyx_GOTREF(__pyx_t_3);
    __pyx_t_5 = NULL;
    if (CYTHON_COMPILING_IN_CPYTHON && likely(PyMethod_Check(__pyx_t_3))) {
      __pyx_t_5 = PyMethod_GET_SELF(__pyx_t_3);
      if (likely(__pyx_t_5)) {
        PyObject* function = PyMethod_GET_FUNCTION(__pyx_t_3);
        __Pyx_INCREF(__pyx_t_5);
        __Pyx_INCREF(function);
        __Pyx_DECREF_SET(__pyx_t_3, function);
      }
    }
    if (__pyx_t_5) {
      __pyx_t_2 = __Pyx_PyObject_CallOneArg(__pyx_t_3, __pyx_t_5); if (unlikely(!__pyx_t_2)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 138; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
      __Pyx_DECREF(__pyx_t_5); __pyx_t_5 = 0;
    } else {
      __pyx_t_2 = __Pyx_PyObject_CallNoArg(__pyx_t_3); if (unlikely(!__pyx_t_2)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 138; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
    }
    __Pyx_GOTREF(__pyx_t_2);
    __Pyx_DECREF(__pyx_t_3); __pyx_t_3 = 0;
    __Pyx_DECREF(__pyx_t_2); __pyx_t_2 = 0;
    __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0;
    /*try:*/ {
      {
        __Pyx_ExceptionSave(&__pyx_t_6, &__pyx_t_7, &__pyx_t_8);
        __Pyx_XGOTREF(__pyx_t_6);
        __Pyx_XGOTREF(__pyx_t_7);
        __Pyx_XGOTREF(__pyx_t_8);
        /*try:*/ {

          /* "kstreamc.pyx":139
 * 
 *         with self.file_handler.applicationbound():
 *             self.logger.info('Opening kernel event stream')             # <<<<<<<<<<<<<<
 *         self.handle = OpenTrace(&self.kevent_logfile)
 * 
 */
          __pyx_t_1 = __Pyx_PyObject_GetAttrStr(__pyx_v_self->logger, __pyx_n_s_info); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 139; __pyx_clineno = __LINE__; goto __pyx_L7_error;}
          __Pyx_GOTREF(__pyx_t_1);
          __pyx_t_2 = __Pyx_PyObject_Call(__pyx_t_1, __pyx_tuple__4, NULL); if (unlikely(!__pyx_t_2)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 139; __pyx_clineno = __LINE__; goto __pyx_L7_error;}
          __Pyx_GOTREF(__pyx_t_2);
          __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0;
          __Pyx_DECREF(__pyx_t_2); __pyx_t_2 = 0;

          /* "kstreamc.pyx":138
 *         self.kevent_logfile.Context = <PVOID> self
 * 
 *         with self.file_handler.applicationbound():             # <<<<<<<<<<<<<<
 *             self.logger.info('Opening kernel event stream')
 *         self.handle = OpenTrace(&self.kevent_logfile)
 */
        }
        __Pyx_XDECREF(__pyx_t_6); __pyx_t_6 = 0;
        __Pyx_XDECREF(__pyx_t_7); __pyx_t_7 = 0;
        __Pyx_XDECREF(__pyx_t_8); __pyx_t_8 = 0;
        goto __pyx_L14_try_end;
        __pyx_L7_error:;
        __Pyx_XDECREF(__pyx_t_5); __pyx_t_5 = 0;
        __Pyx_XDECREF(__pyx_t_3); __pyx_t_3 = 0;
        __Pyx_XDECREF(__pyx_t_1); __pyx_t_1 = 0;
        __Pyx_XDECREF(__pyx_t_2); __pyx_t_2 = 0;
        /*except:*/ {
          __Pyx_AddTraceback("kstreamc.KEventStreamCollector.open_kstream", __pyx_clineno, __pyx_lineno, __pyx_filename);
          if (__Pyx_GetException(&__pyx_t_2, &__pyx_t_1, &__pyx_t_3) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 138; __pyx_clineno = __LINE__; goto __pyx_L9_except_error;}
          __Pyx_GOTREF(__pyx_t_2);
          __Pyx_GOTREF(__pyx_t_1);
          __Pyx_GOTREF(__pyx_t_3);
          __pyx_t_5 = PyTuple_Pack(3, __pyx_t_2, __pyx_t_1, __pyx_t_3); if (unlikely(!__pyx_t_5)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 138; __pyx_clineno = __LINE__; goto __pyx_L9_except_error;}
          __Pyx_GOTREF(__pyx_t_5);
          __pyx_t_9 = __Pyx_PyObject_Call(__pyx_t_4, __pyx_t_5, NULL);
          __Pyx_DECREF(__pyx_t_4); __pyx_t_4 = 0;
          __Pyx_DECREF(__pyx_t_5); __pyx_t_5 = 0;
          if (unlikely(!__pyx_t_9)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 138; __pyx_clineno = __LINE__; goto __pyx_L9_except_error;}
          __Pyx_GOTREF(__pyx_t_9);
          __pyx_t_10 = __Pyx_PyObject_IsTrue(__pyx_t_9);
          __Pyx_DECREF(__pyx_t_9); __pyx_t_9 = 0;
          if (__pyx_t_10 < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 138; __pyx_clineno = __LINE__; goto __pyx_L9_except_error;}
          __pyx_t_11 = ((!(__pyx_t_10 != 0)) != 0);
          if (__pyx_t_11) {
            __Pyx_GIVEREF(__pyx_t_2);
            __Pyx_GIVEREF(__pyx_t_1);
            __Pyx_XGIVEREF(__pyx_t_3);
            __Pyx_ErrRestore(__pyx_t_2, __pyx_t_1, __pyx_t_3);
            __pyx_t_2 = 0; __pyx_t_1 = 0; __pyx_t_3 = 0; 
            {__pyx_filename = __pyx_f[0]; __pyx_lineno = 138; __pyx_clineno = __LINE__; goto __pyx_L9_except_error;}
          }
          __Pyx_DECREF(__pyx_t_2); __pyx_t_2 = 0;
          __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0;
          __Pyx_DECREF(__pyx_t_3); __pyx_t_3 = 0;
          goto __pyx_L8_exception_handled;
        }
        __pyx_L9_except_error:;
        __Pyx_XGIVEREF(__pyx_t_6);
        __Pyx_XGIVEREF(__pyx_t_7);
        __Pyx_XGIVEREF(__pyx_t_8);
        __Pyx_ExceptionReset(__pyx_t_6, __pyx_t_7, __pyx_t_8);
        goto __pyx_L1_error;
        __pyx_L8_exception_handled:;
        __Pyx_XGIVEREF(__pyx_t_6);
        __Pyx_XGIVEREF(__pyx_t_7);
        __Pyx_XGIVEREF(__pyx_t_8);
        __Pyx_ExceptionReset(__pyx_t_6, __pyx_t_7, __pyx_t_8);
        __pyx_L14_try_end:;
      }
    }
    /*finally:*/ {
      /*normal exit:*/{
        if (__pyx_t_4) {
          __pyx_t_8 = __Pyx_PyObject_Call(__pyx_t_4, __pyx_tuple__5, NULL);
          __Pyx_DECREF(__pyx_t_4); __pyx_t_4 = 0;
          if (unlikely(!__pyx_t_8)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 138; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
          __Pyx_GOTREF(__pyx_t_8);
          __Pyx_DECREF(__pyx_t_8); __pyx_t_8 = 0;
        }
        goto __pyx_L6;
      }
      __pyx_L6:;
    }
    goto __pyx_L18;
    __pyx_L3_error:;
    __Pyx_DECREF(__pyx_t_4); __pyx_t_4 = 0;
    goto __pyx_L1_error;
    __pyx_L18:;
  }

  /* "kstreamc.pyx":140
 *         with self.file_handler.applicationbound():
 *             self.logger.info('Opening kernel event stream')
 *         self.handle = OpenTrace(&self.kevent_logfile)             # <<<<<<<<<<<<<<
 * 
 *         if self.on_kstream_open_callback:
 */
  __pyx_v_self->handle = OpenTrace((&__pyx_v_self->kevent_logfile));

  /* "kstreamc.pyx":142
 *         self.handle = OpenTrace(&self.kevent_logfile)
 * 
 *         if self.on_kstream_open_callback:             # <<<<<<<<<<<<<<
 *             self.on_kstream_open_callback()
 * 
 */
  __pyx_t_11 = __Pyx_PyObject_IsTrue(__pyx_v_self->on_kstream_open_callback); if (unlikely(__pyx_t_11 < 0)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 142; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  if (__pyx_t_11) {

    /* "kstreamc.pyx":143
 * 
 *         if self.on_kstream_open_callback:
 *             self.on_kstream_open_callback()             # <<<<<<<<<<<<<<
 * 
 *         # foward the kernel event stream
 */
    __Pyx_INCREF(__pyx_v_self->on_kstream_open_callback);
    __pyx_t_1 = __pyx_v_self->on_kstream_open_callback; __pyx_t_2 = NULL;
    if (CYTHON_COMPILING_IN_CPYTHON && likely(PyMethod_Check(__pyx_t_1))) {
      __pyx_t_2 = PyMethod_GET_SELF(__pyx_t_1);
      if (likely(__pyx_t_2)) {
        PyObject* function = PyMethod_GET_FUNCTION(__pyx_t_1);
        __Pyx_INCREF(__pyx_t_2);
        __Pyx_INCREF(function);
        __Pyx_DECREF_SET(__pyx_t_1, function);
      }
    }
    if (__pyx_t_2) {
      __pyx_t_3 = __Pyx_PyObject_CallOneArg(__pyx_t_1, __pyx_t_2); if (unlikely(!__pyx_t_3)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 143; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
      __Pyx_DECREF(__pyx_t_2); __pyx_t_2 = 0;
    } else {
      __pyx_t_3 = __Pyx_PyObject_CallNoArg(__pyx_t_1); if (unlikely(!__pyx_t_3)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 143; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    }
    __Pyx_GOTREF(__pyx_t_3);
    __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0;
    __Pyx_DECREF(__pyx_t_3); __pyx_t_3 = 0;

    /* "kstreamc.pyx":142
 *         self.handle = OpenTrace(&self.kevent_logfile)
 * 
 *         if self.on_kstream_open_callback:             # <<<<<<<<<<<<<<
 *             self.on_kstream_open_callback()
 * 
 */
  }

  /* "kstreamc.pyx":147
 *         # foward the kernel event stream
 *         # to the consumer and start the processing
 *         status = ProcessTrace(&self.handle,             # <<<<<<<<<<<<<<
 *                               1,
 *                               NULL,
 */
  __pyx_t_3 = __Pyx_PyInt_From_ULONG(ProcessTrace((&__pyx_v_self->handle), 1, NULL, NULL)); if (unlikely(!__pyx_t_3)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 147; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_3);
  __pyx_v_status = __pyx_t_3;
  __pyx_t_3 = 0;

  /* "kstreamc.pyx":152
 *                               NULL)
 * 
 *         if status != ERROR_SUCCESS or status != ERROR_CANCELLED:             # <<<<<<<<<<<<<<
 *             if status != INVALID_PROCESSTRACE_HANDLE:
 *                 CloseTrace(self.handle)
 */
  __pyx_t_3 = __Pyx_PyInt_From_int(ERROR_SUCCESS); if (unlikely(!__pyx_t_3)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 152; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_3);
  __pyx_t_1 = PyObject_RichCompare(__pyx_v_status, __pyx_t_3, Py_NE); __Pyx_XGOTREF(__pyx_t_1); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 152; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_DECREF(__pyx_t_3); __pyx_t_3 = 0;
  __pyx_t_10 = __Pyx_PyObject_IsTrue(__pyx_t_1); if (unlikely(__pyx_t_10 < 0)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 152; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0;
  if (!__pyx_t_10) {
  } else {
    __pyx_t_11 = __pyx_t_10;
    goto __pyx_L21_bool_binop_done;
  }
  __pyx_t_1 = __Pyx_PyInt_From_int(ERROR_CANCELLED); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 152; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_1);
  __pyx_t_3 = PyObject_RichCompare(__pyx_v_status, __pyx_t_1, Py_NE); __Pyx_XGOTREF(__pyx_t_3); if (unlikely(!__pyx_t_3)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 152; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0;
  __pyx_t_10 = __Pyx_PyObject_IsTrue(__pyx_t_3); if (unlikely(__pyx_t_10 < 0)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 152; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_DECREF(__pyx_t_3); __pyx_t_3 = 0;
  __pyx_t_11 = __pyx_t_10;
  __pyx_L21_bool_binop_done:;
  if (__pyx_t_11) {

    /* "kstreamc.pyx":153
 * 
 *         if status != ERROR_SUCCESS or status != ERROR_CANCELLED:
 *             if status != INVALID_PROCESSTRACE_HANDLE:             # <<<<<<<<<<<<<<
 *                 CloseTrace(self.handle)
 *             else:
 */
    __pyx_t_3 = __Pyx_PyInt_From_int(INVALID_PROCESSTRACE_HANDLE); if (unlikely(!__pyx_t_3)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 153; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    __Pyx_GOTREF(__pyx_t_3);
    __pyx_t_1 = PyObject_RichCompare(__pyx_v_status, __pyx_t_3, Py_NE); __Pyx_XGOTREF(__pyx_t_1); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 153; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    __Pyx_DECREF(__pyx_t_3); __pyx_t_3 = 0;
    __pyx_t_11 = __Pyx_PyObject_IsTrue(__pyx_t_1); if (unlikely(__pyx_t_11 < 0)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 153; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0;
    if (__pyx_t_11) {

      /* "kstreamc.pyx":154
 *         if status != ERROR_SUCCESS or status != ERROR_CANCELLED:
 *             if status != INVALID_PROCESSTRACE_HANDLE:
 *                 CloseTrace(self.handle)             # <<<<<<<<<<<<<<
 *             else:
 *                 raise RuntimeError('ERROR - Unable to open kernel event stream. Error %s' % status)
 */
      CloseTrace(__pyx_v_self->handle);

      /* "kstreamc.pyx":153
 * 
 *         if status != ERROR_SUCCESS or status != ERROR_CANCELLED:
 *             if status != INVALID_PROCESSTRACE_HANDLE:             # <<<<<<<<<<<<<<
 *                 CloseTrace(self.handle)
 *             else:
 */
      goto __pyx_L23;
    }

    /* "kstreamc.pyx":156
 *                 CloseTrace(self.handle)
 *             else:
 *                 raise RuntimeError('ERROR - Unable to open kernel event stream. Error %s' % status)             # <<<<<<<<<<<<<<
 * 
 *     def set_kstream_open_callback(self, callback):
 */
    /*else*/ {
      __pyx_t_1 = __Pyx_PyString_Format(__pyx_kp_s_ERROR_Unable_to_open_kernel_even, __pyx_v_status); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 156; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
      __Pyx_GOTREF(__pyx_t_1);
      __pyx_t_3 = PyTuple_New(1); if (unlikely(!__pyx_t_3)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 156; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
      __Pyx_GOTREF(__pyx_t_3);
      __Pyx_GIVEREF(__pyx_t_1);
      PyTuple_SET_ITEM(__pyx_t_3, 0, __pyx_t_1);
      __pyx_t_1 = 0;
      __pyx_t_1 = __Pyx_PyObject_Call(__pyx_builtin_RuntimeError, __pyx_t_3, NULL); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 156; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
      __Pyx_GOTREF(__pyx_t_1);
      __Pyx_DECREF(__pyx_t_3); __pyx_t_3 = 0;
      __Pyx_Raise(__pyx_t_1, 0, 0, 0);
      __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0;
      {__pyx_filename = __pyx_f[0]; __pyx_lineno = 156; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    }
    __pyx_L23:;

    /* "kstreamc.pyx":152
 *                               NULL)
 * 
 *         if status != ERROR_SUCCESS or status != ERROR_CANCELLED:             # <<<<<<<<<<<<<<
 *             if status != INVALID_PROCESSTRACE_HANDLE:
 *                 CloseTrace(self.handle)
 */
  }

  /* "kstreamc.pyx":112
 *         self.interrupted = False
 * 
 *     def open_kstream(self, callback):             # <<<<<<<<<<<<<<
 *         """Initializes the kernel event stream.
 * 
 */

  /* function exit code */
  __pyx_r = Py_None; __Pyx_INCREF(Py_None);
  goto __pyx_L0;
  __pyx_L1_error:;
  __Pyx_XDECREF(__pyx_t_1);
  __Pyx_XDECREF(__pyx_t_2);
  __Pyx_XDECREF(__pyx_t_3);
  __Pyx_XDECREF(__pyx_t_5);
  __Pyx_AddTraceback("kstreamc.KEventStreamCollector.open_kstream", __pyx_clineno, __pyx_lineno, __pyx_filename);
  __pyx_r = NULL;
  __pyx_L0:;
  __Pyx_XDECREF(__pyx_v_status);
  __Pyx_XGIVEREF(__pyx_r);
  __Pyx_RefNannyFinishContext();
  return __pyx_r;
}

/* "kstreamc.pyx":158
 *                 raise RuntimeError('ERROR - Unable to open kernel event stream. Error %s' % status)
 * 
 *     def set_kstream_open_callback(self, callback):             # <<<<<<<<<<<<<<
 *         self.on_kstream_open_callback = callback
 * 
 */

/* Python wrapper */
static PyObject *__pyx_pw_8kstreamc_21KEventStreamCollector_5set_kstream_open_callback(PyObject *__pyx_v_self, PyObject *__pyx_v_callback); /*proto*/
static PyObject *__pyx_pw_8kstreamc_21KEventStreamCollector_5set_kstream_open_callback(PyObject *__pyx_v_self, PyObject *__pyx_v_callback) {
  PyObject *__pyx_r = 0;
  __Pyx_RefNannyDeclarations
  __Pyx_RefNannySetupContext("set_kstream_open_callback (wrapper)", 0);
  __pyx_r = __pyx_pf_8kstreamc_21KEventStreamCollector_4set_kstream_open_callback(((struct __pyx_obj_8kstreamc_KEventStreamCollector *)__pyx_v_self), ((PyObject *)__pyx_v_callback));

  /* function exit code */
  __Pyx_RefNannyFinishContext();
  return __pyx_r;
}

static PyObject *__pyx_pf_8kstreamc_21KEventStreamCollector_4set_kstream_open_callback(struct __pyx_obj_8kstreamc_KEventStreamCollector *__pyx_v_self, PyObject *__pyx_v_callback) {
  PyObject *__pyx_r = NULL;
  __Pyx_RefNannyDeclarations
  __Pyx_RefNannySetupContext("set_kstream_open_callback", 0);

  /* "kstreamc.pyx":159
 * 
 *     def set_kstream_open_callback(self, callback):
 *         self.on_kstream_open_callback = callback             # <<<<<<<<<<<<<<
 * 
 *     def close_kstream(self):
 */
  __Pyx_INCREF(__pyx_v_callback);
  __Pyx_GIVEREF(__pyx_v_callback);
  __Pyx_GOTREF(__pyx_v_self->on_kstream_open_callback);
  __Pyx_DECREF(__pyx_v_self->on_kstream_open_callback);
  __pyx_v_self->on_kstream_open_callback = __pyx_v_callback;

  /* "kstreamc.pyx":158
 *                 raise RuntimeError('ERROR - Unable to open kernel event stream. Error %s' % status)
 * 
 *     def set_kstream_open_callback(self, callback):             # <<<<<<<<<<<<<<
 *         self.on_kstream_open_callback = callback
 * 
 */

  /* function exit code */
  __pyx_r = Py_None; __Pyx_INCREF(Py_None);
  __Pyx_XGIVEREF(__pyx_r);
  __Pyx_RefNannyFinishContext();
  return __pyx_r;
}

/* "kstreamc.pyx":161
 *         self.on_kstream_open_callback = callback
 * 
 *     def close_kstream(self):             # <<<<<<<<<<<<<<
 *         CloseTrace(self.handle)
 * 
 */

/* Python wrapper */
static PyObject *__pyx_pw_8kstreamc_21KEventStreamCollector_7close_kstream(PyObject *__pyx_v_self, CYTHON_UNUSED PyObject *unused); /*proto*/
static PyObject *__pyx_pw_8kstreamc_21KEventStreamCollector_7close_kstream(PyObject *__pyx_v_self, CYTHON_UNUSED PyObject *unused) {
  PyObject *__pyx_r = 0;
  __Pyx_RefNannyDeclarations
  __Pyx_RefNannySetupContext("close_kstream (wrapper)", 0);
  __pyx_r = __pyx_pf_8kstreamc_21KEventStreamCollector_6close_kstream(((struct __pyx_obj_8kstreamc_KEventStreamCollector *)__pyx_v_self));

  /* function exit code */
  __Pyx_RefNannyFinishContext();
  return __pyx_r;
}

static PyObject *__pyx_pf_8kstreamc_21KEventStreamCollector_6close_kstream(struct __pyx_obj_8kstreamc_KEventStreamCollector *__pyx_v_self) {
  PyObject *__pyx_r = NULL;
  __Pyx_RefNannyDeclarations
  __Pyx_RefNannySetupContext("close_kstream", 0);

  /* "kstreamc.pyx":162
 * 
 *     def close_kstream(self):
 *         CloseTrace(self.handle)             # <<<<<<<<<<<<<<
 * 
 *     def add_kevent_filter(self, kefilter):
 */
  CloseTrace(__pyx_v_self->handle);

  /* "kstreamc.pyx":161
 *         self.on_kstream_open_callback = callback
 * 
 *     def close_kstream(self):             # <<<<<<<<<<<<<<
 *         CloseTrace(self.handle)
 * 
 */

  /* function exit code */
  __pyx_r = Py_None; __Pyx_INCREF(Py_None);
  __Pyx_XGIVEREF(__pyx_r);
  __Pyx_RefNannyFinishContext();
  return __pyx_r;
}

/* "kstreamc.pyx":164
 *         CloseTrace(self.handle)
 * 
 *     def add_kevent_filter(self, kefilter):             # <<<<<<<<<<<<<<
 *         self.kefilters.append(kefilter)
 * 
 */

/* Python wrapper */
static PyObject *__pyx_pw_8kstreamc_21KEventStreamCollector_9add_kevent_filter(PyObject *__pyx_v_self, PyObject *__pyx_v_kefilter); /*proto*/
static PyObject *__pyx_pw_8kstreamc_21KEventStreamCollector_9add_kevent_filter(PyObject *__pyx_v_self, PyObject *__pyx_v_kefilter) {
  PyObject *__pyx_r = 0;
  __Pyx_RefNannyDeclarations
  __Pyx_RefNannySetupContext("add_kevent_filter (wrapper)", 0);
  __pyx_r = __pyx_pf_8kstreamc_21KEventStreamCollector_8add_kevent_filter(((struct __pyx_obj_8kstreamc_KEventStreamCollector *)__pyx_v_self), ((PyObject *)__pyx_v_kefilter));

  /* function exit code */
  __Pyx_RefNannyFinishContext();
  return __pyx_r;
}

static PyObject *__pyx_pf_8kstreamc_21KEventStreamCollector_8add_kevent_filter(struct __pyx_obj_8kstreamc_KEventStreamCollector *__pyx_v_self, PyObject *__pyx_v_kefilter) {
  PyObject *__pyx_r = NULL;
  __Pyx_RefNannyDeclarations
  int __pyx_t_1;
  int __pyx_lineno = 0;
  const char *__pyx_filename = NULL;
  int __pyx_clineno = 0;
  __Pyx_RefNannySetupContext("add_kevent_filter", 0);

  /* "kstreamc.pyx":165
 * 
 *     def add_kevent_filter(self, kefilter):
 *         self.kefilters.append(kefilter)             # <<<<<<<<<<<<<<
 * 
 *     def add_pid_filter(self, pid):
 */
  __pyx_t_1 = __Pyx_PyObject_Append(__pyx_v_self->kefilters, __pyx_v_kefilter); if (unlikely(__pyx_t_1 == -1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 165; __pyx_clineno = __LINE__; goto __pyx_L1_error;}

  /* "kstreamc.pyx":164
 *         CloseTrace(self.handle)
 * 
 *     def add_kevent_filter(self, kefilter):             # <<<<<<<<<<<<<<
 *         self.kefilters.append(kefilter)
 * 
 */

  /* function exit code */
  __pyx_r = Py_None; __Pyx_INCREF(Py_None);
  goto __pyx_L0;
  __pyx_L1_error:;
  __Pyx_AddTraceback("kstreamc.KEventStreamCollector.add_kevent_filter", __pyx_clineno, __pyx_lineno, __pyx_filename);
  __pyx_r = NULL;
  __pyx_L0:;
  __Pyx_XGIVEREF(__pyx_r);
  __Pyx_RefNannyFinishContext();
  return __pyx_r;
}

/* "kstreamc.pyx":167
 *         self.kefilters.append(kefilter)
 * 
 *     def add_pid_filter(self, pid):             # <<<<<<<<<<<<<<
 *         if pid:
 *             self._filters.append(lambda kpid: kpid != int(pid))
 */

/* Python wrapper */
static PyObject *__pyx_pw_8kstreamc_21KEventStreamCollector_11add_pid_filter(PyObject *__pyx_v_self, PyObject *__pyx_v_pid); /*proto*/
static PyObject *__pyx_pw_8kstreamc_21KEventStreamCollector_11add_pid_filter(PyObject *__pyx_v_self, PyObject *__pyx_v_pid) {
  PyObject *__pyx_r = 0;
  __Pyx_RefNannyDeclarations
  __Pyx_RefNannySetupContext("add_pid_filter (wrapper)", 0);
  __pyx_r = __pyx_pf_8kstreamc_21KEventStreamCollector_10add_pid_filter(((struct __pyx_obj_8kstreamc_KEventStreamCollector *)__pyx_v_self), ((PyObject *)__pyx_v_pid));

  /* function exit code */
  __Pyx_RefNannyFinishContext();
  return __pyx_r;
}

/* "kstreamc.pyx":169
 *     def add_pid_filter(self, pid):
 *         if pid:
 *             self._filters.append(lambda kpid: kpid != int(pid))             # <<<<<<<<<<<<<<
 * 
 *     def set_excluded_procs(self, excluded_procs):
 */

/* Python wrapper */
static PyObject *__pyx_pw_8kstreamc_21KEventStreamCollector_14add_pid_filter_lambda(PyObject *__pyx_self, PyObject *__pyx_v_kpid); /*proto*/
static PyMethodDef __pyx_mdef_8kstreamc_21KEventStreamCollector_14add_pid_filter_lambda = {"lambda", (PyCFunction)__pyx_pw_8kstreamc_21KEventStreamCollector_14add_pid_filter_lambda, METH_O, 0};
static PyObject *__pyx_pw_8kstreamc_21KEventStreamCollector_14add_pid_filter_lambda(PyObject *__pyx_self, PyObject *__pyx_v_kpid) {
  PyObject *__pyx_r = 0;
  __Pyx_RefNannyDeclarations
  __Pyx_RefNannySetupContext("lambda (wrapper)", 0);
  __pyx_r = __pyx_lambda_funcdef_lambda(__pyx_self, ((PyObject *)__pyx_v_kpid));

  /* function exit code */
  __Pyx_RefNannyFinishContext();
  return __pyx_r;
}

static PyObject *__pyx_lambda_funcdef_lambda(PyObject *__pyx_self, PyObject *__pyx_v_kpid) {
  struct __pyx_obj_8kstreamc___pyx_scope_struct__add_pid_filter *__pyx_cur_scope;
  struct __pyx_obj_8kstreamc___pyx_scope_struct__add_pid_filter *__pyx_outer_scope;
  PyObject *__pyx_r = NULL;
  __Pyx_RefNannyDeclarations
  PyObject *__pyx_t_1 = NULL;
  PyObject *__pyx_t_2 = NULL;
  int __pyx_lineno = 0;
  const char *__pyx_filename = NULL;
  int __pyx_clineno = 0;
  __Pyx_RefNannySetupContext("lambda", 0);
  __pyx_outer_scope = (struct __pyx_obj_8kstreamc___pyx_scope_struct__add_pid_filter *) __Pyx_CyFunction_GetClosure(__pyx_self);
  __pyx_cur_scope = __pyx_outer_scope;
  __Pyx_XDECREF(__pyx_r);
  if (unlikely(!__pyx_cur_scope->__pyx_v_pid)) { __Pyx_RaiseClosureNameError("pid"); {__pyx_filename = __pyx_f[0]; __pyx_lineno = 169; __pyx_clineno = __LINE__; goto __pyx_L1_error;} }
  __pyx_t_1 = PyNumber_Int(__pyx_cur_scope->__pyx_v_pid); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 169; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_1);
  __pyx_t_2 = PyObject_RichCompare(__pyx_v_kpid, __pyx_t_1, Py_NE); __Pyx_XGOTREF(__pyx_t_2); if (unlikely(!__pyx_t_2)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 169; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0;
  __pyx_r = __pyx_t_2;
  __pyx_t_2 = 0;
  goto __pyx_L0;

  /* function exit code */
  __pyx_L1_error:;
  __Pyx_XDECREF(__pyx_t_1);
  __Pyx_XDECREF(__pyx_t_2);
  __Pyx_AddTraceback("kstreamc.KEventStreamCollector.add_pid_filter.lambda", __pyx_clineno, __pyx_lineno, __pyx_filename);
  __pyx_r = NULL;
  __pyx_L0:;
  __Pyx_XGIVEREF(__pyx_r);
  __Pyx_RefNannyFinishContext();
  return __pyx_r;
}

/* "kstreamc.pyx":167
 *         self.kefilters.append(kefilter)
 * 
 *     def add_pid_filter(self, pid):             # <<<<<<<<<<<<<<
 *         if pid:
 *             self._filters.append(lambda kpid: kpid != int(pid))
 */

static PyObject *__pyx_pf_8kstreamc_21KEventStreamCollector_10add_pid_filter(struct __pyx_obj_8kstreamc_KEventStreamCollector *__pyx_v_self, PyObject *__pyx_v_pid) {
  struct __pyx_obj_8kstreamc___pyx_scope_struct__add_pid_filter *__pyx_cur_scope;
  PyObject *__pyx_r = NULL;
  __Pyx_RefNannyDeclarations
  int __pyx_t_1;
  PyObject *__pyx_t_2 = NULL;
  int __pyx_t_3;
  int __pyx_lineno = 0;
  const char *__pyx_filename = NULL;
  int __pyx_clineno = 0;
  __Pyx_RefNannySetupContext("add_pid_filter", 0);
  __pyx_cur_scope = (struct __pyx_obj_8kstreamc___pyx_scope_struct__add_pid_filter *)__pyx_tp_new_8kstreamc___pyx_scope_struct__add_pid_filter(__pyx_ptype_8kstreamc___pyx_scope_struct__add_pid_filter, __pyx_empty_tuple, NULL);
  if (unlikely(!__pyx_cur_scope)) {
    __Pyx_RefNannyFinishContext();
    return NULL;
  }
  __Pyx_GOTREF(__pyx_cur_scope);
  __pyx_cur_scope->__pyx_v_pid = __pyx_v_pid;
  __Pyx_INCREF(__pyx_cur_scope->__pyx_v_pid);
  __Pyx_GIVEREF(__pyx_cur_scope->__pyx_v_pid);

  /* "kstreamc.pyx":168
 * 
 *     def add_pid_filter(self, pid):
 *         if pid:             # <<<<<<<<<<<<<<
 *             self._filters.append(lambda kpid: kpid != int(pid))
 * 
 */
  __pyx_t_1 = __Pyx_PyObject_IsTrue(__pyx_cur_scope->__pyx_v_pid); if (unlikely(__pyx_t_1 < 0)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 168; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  if (__pyx_t_1) {

    /* "kstreamc.pyx":169
 *     def add_pid_filter(self, pid):
 *         if pid:
 *             self._filters.append(lambda kpid: kpid != int(pid))             # <<<<<<<<<<<<<<
 * 
 *     def set_excluded_procs(self, excluded_procs):
 */
    __pyx_t_2 = __Pyx_CyFunction_NewEx(&__pyx_mdef_8kstreamc_21KEventStreamCollector_14add_pid_filter_lambda, 0, __pyx_n_s_add_pid_filter_locals_lambda, ((PyObject*)__pyx_cur_scope), __pyx_n_s_kstreamc, __pyx_d, NULL); if (unlikely(!__pyx_t_2)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 169; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    __Pyx_GOTREF(__pyx_t_2);
    __pyx_t_3 = __Pyx_PyObject_Append(__pyx_v_self->_filters, __pyx_t_2); if (unlikely(__pyx_t_3 == -1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 169; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    __Pyx_DECREF(__pyx_t_2); __pyx_t_2 = 0;

    /* "kstreamc.pyx":168
 * 
 *     def add_pid_filter(self, pid):
 *         if pid:             # <<<<<<<<<<<<<<
 *             self._filters.append(lambda kpid: kpid != int(pid))
 * 
 */
  }

  /* "kstreamc.pyx":167
 *         self.kefilters.append(kefilter)
 * 
 *     def add_pid_filter(self, pid):             # <<<<<<<<<<<<<<
 *         if pid:
 *             self._filters.append(lambda kpid: kpid != int(pid))
 */

  /* function exit code */
  __pyx_r = Py_None; __Pyx_INCREF(Py_None);
  goto __pyx_L0;
  __pyx_L1_error:;
  __Pyx_XDECREF(__pyx_t_2);
  __Pyx_AddTraceback("kstreamc.KEventStreamCollector.add_pid_filter", __pyx_clineno, __pyx_lineno, __pyx_filename);
  __pyx_r = NULL;
  __pyx_L0:;
  __Pyx_DECREF(((PyObject *)__pyx_cur_scope));
  __Pyx_XGIVEREF(__pyx_r);
  __Pyx_RefNannyFinishContext();
  return __pyx_r;
}

/* "kstreamc.pyx":171
 *             self._filters.append(lambda kpid: kpid != int(pid))
 * 
 *     def set_excluded_procs(self, excluded_procs):             # <<<<<<<<<<<<<<
 *         self._excluded_procs = excluded_procs
 * 
 */

/* Python wrapper */
static PyObject *__pyx_pw_8kstreamc_21KEventStreamCollector_13set_excluded_procs(PyObject *__pyx_v_self, PyObject *__pyx_v_excluded_procs); /*proto*/
static PyObject *__pyx_pw_8kstreamc_21KEventStreamCollector_13set_excluded_procs(PyObject *__pyx_v_self, PyObject *__pyx_v_excluded_procs) {
  PyObject *__pyx_r = 0;
  __Pyx_RefNannyDeclarations
  __Pyx_RefNannySetupContext("set_excluded_procs (wrapper)", 0);
  __pyx_r = __pyx_pf_8kstreamc_21KEventStreamCollector_12set_excluded_procs(((struct __pyx_obj_8kstreamc_KEventStreamCollector *)__pyx_v_self), ((PyObject *)__pyx_v_excluded_procs));

  /* function exit code */
  __Pyx_RefNannyFinishContext();
  return __pyx_r;
}

static PyObject *__pyx_pf_8kstreamc_21KEventStreamCollector_12set_excluded_procs(struct __pyx_obj_8kstreamc_KEventStreamCollector *__pyx_v_self, PyObject *__pyx_v_excluded_procs) {
  PyObject *__pyx_r = NULL;
  __Pyx_RefNannyDeclarations
  __Pyx_RefNannySetupContext("set_excluded_procs", 0);

  /* "kstreamc.pyx":172
 * 
 *     def set_excluded_procs(self, excluded_procs):
 *         self._excluded_procs = excluded_procs             # <<<<<<<<<<<<<<
 * 
 *     def clear_kefilters(self):
 */
  __Pyx_INCREF(__pyx_v_excluded_procs);
  __Pyx_GIVEREF(__pyx_v_excluded_procs);
  __Pyx_GOTREF(__pyx_v_self->_excluded_procs);
  __Pyx_DECREF(__pyx_v_self->_excluded_procs);
  __pyx_v_self->_excluded_procs = __pyx_v_excluded_procs;

  /* "kstreamc.pyx":171
 *             self._filters.append(lambda kpid: kpid != int(pid))
 * 
 *     def set_excluded_procs(self, excluded_procs):             # <<<<<<<<<<<<<<
 *         self._excluded_procs = excluded_procs
 * 
 */

  /* function exit code */
  __pyx_r = Py_None; __Pyx_INCREF(Py_None);
  __Pyx_XGIVEREF(__pyx_r);
  __Pyx_RefNannyFinishContext();
  return __pyx_r;
}

/* "kstreamc.pyx":174
 *         self._excluded_procs = excluded_procs
 * 
 *     def clear_kefilters(self):             # <<<<<<<<<<<<<<
 *         self.kefilters.clear()
 * 
 */

/* Python wrapper */
static PyObject *__pyx_pw_8kstreamc_21KEventStreamCollector_15clear_kefilters(PyObject *__pyx_v_self, CYTHON_UNUSED PyObject *unused); /*proto*/
static PyObject *__pyx_pw_8kstreamc_21KEventStreamCollector_15clear_kefilters(PyObject *__pyx_v_self, CYTHON_UNUSED PyObject *unused) {
  PyObject *__pyx_r = 0;
  __Pyx_RefNannyDeclarations
  __Pyx_RefNannySetupContext("clear_kefilters (wrapper)", 0);
  __pyx_r = __pyx_pf_8kstreamc_21KEventStreamCollector_14clear_kefilters(((struct __pyx_obj_8kstreamc_KEventStreamCollector *)__pyx_v_self));

  /* function exit code */
  __Pyx_RefNannyFinishContext();
  return __pyx_r;
}

static PyObject *__pyx_pf_8kstreamc_21KEventStreamCollector_14clear_kefilters(struct __pyx_obj_8kstreamc_KEventStreamCollector *__pyx_v_self) {
  PyObject *__pyx_r = NULL;
  __Pyx_RefNannyDeclarations
  PyObject *__pyx_t_1 = NULL;
  PyObject *__pyx_t_2 = NULL;
  PyObject *__pyx_t_3 = NULL;
  int __pyx_lineno = 0;
  const char *__pyx_filename = NULL;
  int __pyx_clineno = 0;
  __Pyx_RefNannySetupContext("clear_kefilters", 0);

  /* "kstreamc.pyx":175
 * 
 *     def clear_kefilters(self):
 *         self.kefilters.clear()             # <<<<<<<<<<<<<<
 * 
 *     cdef process_kevent_callback(self,  EVENT_RECORD* kevent_trace):
 */
  __pyx_t_2 = __Pyx_PyObject_GetAttrStr(__pyx_v_self->kefilters, __pyx_n_s_clear); if (unlikely(!__pyx_t_2)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 175; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_2);
  __pyx_t_3 = NULL;
  if (CYTHON_COMPILING_IN_CPYTHON && likely(PyMethod_Check(__pyx_t_2))) {
    __pyx_t_3 = PyMethod_GET_SELF(__pyx_t_2);
    if (likely(__pyx_t_3)) {
      PyObject* function = PyMethod_GET_FUNCTION(__pyx_t_2);
      __Pyx_INCREF(__pyx_t_3);
      __Pyx_INCREF(function);
      __Pyx_DECREF_SET(__pyx_t_2, function);
    }
  }
  if (__pyx_t_3) {
    __pyx_t_1 = __Pyx_PyObject_CallOneArg(__pyx_t_2, __pyx_t_3); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 175; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    __Pyx_DECREF(__pyx_t_3); __pyx_t_3 = 0;
  } else {
    __pyx_t_1 = __Pyx_PyObject_CallNoArg(__pyx_t_2); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 175; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  }
  __Pyx_GOTREF(__pyx_t_1);
  __Pyx_DECREF(__pyx_t_2); __pyx_t_2 = 0;
  __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0;

  /* "kstreamc.pyx":174
 *         self._excluded_procs = excluded_procs
 * 
 *     def clear_kefilters(self):             # <<<<<<<<<<<<<<
 *         self.kefilters.clear()
 * 
 */

  /* function exit code */
  __pyx_r = Py_None; __Pyx_INCREF(Py_None);
  goto __pyx_L0;
  __pyx_L1_error:;
  __Pyx_XDECREF(__pyx_t_1);
  __Pyx_XDECREF(__pyx_t_2);
  __Pyx_XDECREF(__pyx_t_3);
  __Pyx_AddTraceback("kstreamc.KEventStreamCollector.clear_kefilters", __pyx_clineno, __pyx_lineno, __pyx_filename);
  __pyx_r = NULL;
  __pyx_L0:;
  __Pyx_XGIVEREF(__pyx_r);
  __Pyx_RefNannyFinishContext();
  return __pyx_r;
}

/* "kstreamc.pyx":177
 *         self.kefilters.clear()
 * 
 *     cdef process_kevent_callback(self,  EVENT_RECORD* kevent_trace):             # <<<<<<<<<<<<<<
 *         # remember we can`t use the `self` to refer to the instance
 *         # of the class. In case the better approach to access
 */

static PyObject *__pyx_f_8kstreamc_21KEventStreamCollector_process_kevent_callback(CYTHON_UNUSED struct __pyx_obj_8kstreamc_KEventStreamCollector *__pyx_v_self, EVENT_RECORD *__pyx_v_kevent_trace) {
  struct __pyx_obj_8kstreamc_KEventStreamCollector *__pyx_v_cself = 0;
  PyObject *__pyx_r = NULL;
  __Pyx_RefNannyDeclarations
  PyObject *__pyx_t_1 = NULL;
  int __pyx_t_2;
  int __pyx_t_3;
  int __pyx_lineno = 0;
  const char *__pyx_filename = NULL;
  int __pyx_clineno = 0;
  __Pyx_RefNannySetupContext("process_kevent_callback", 0);

  /* "kstreamc.pyx":181
 *         # of the class. In case the better approach to access
 *         # the `self` exists, I would like to see it
 *         cdef KEventStreamCollector cself = <KEventStreamCollector> kevent_trace.UserContext             # <<<<<<<<<<<<<<
 *         if not cself.interrupted:
 *             cself._process_kevent(kevent_trace)
 */
  __pyx_t_1 = ((PyObject *)__pyx_v_kevent_trace->UserContext);
  __Pyx_INCREF(__pyx_t_1);
  __pyx_v_cself = ((struct __pyx_obj_8kstreamc_KEventStreamCollector *)__pyx_t_1);
  __pyx_t_1 = 0;

  /* "kstreamc.pyx":182
 *         # the `self` exists, I would like to see it
 *         cdef KEventStreamCollector cself = <KEventStreamCollector> kevent_trace.UserContext
 *         if not cself.interrupted:             # <<<<<<<<<<<<<<
 *             cself._process_kevent(kevent_trace)
 * 
 */
  __pyx_t_2 = __Pyx_PyObject_IsTrue(__pyx_v_cself->interrupted); if (unlikely(__pyx_t_2 < 0)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 182; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __pyx_t_3 = ((!__pyx_t_2) != 0);
  if (__pyx_t_3) {

    /* "kstreamc.pyx":183
 *         cdef KEventStreamCollector cself = <KEventStreamCollector> kevent_trace.UserContext
 *         if not cself.interrupted:
 *             cself._process_kevent(kevent_trace)             # <<<<<<<<<<<<<<
 * 
 *     cdef void _process_kevent(self, EVENT_RECORD* kevent_trace) except *:
 */
    ((struct __pyx_vtabstruct_8kstreamc_KEventStreamCollector *)__pyx_v_cself->__pyx_vtab)->_process_kevent(__pyx_v_cself, __pyx_v_kevent_trace); if (unlikely(PyErr_Occurred())) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 183; __pyx_clineno = __LINE__; goto __pyx_L1_error;}

    /* "kstreamc.pyx":182
 *         # the `self` exists, I would like to see it
 *         cdef KEventStreamCollector cself = <KEventStreamCollector> kevent_trace.UserContext
 *         if not cself.interrupted:             # <<<<<<<<<<<<<<
 *             cself._process_kevent(kevent_trace)
 * 
 */
  }

  /* "kstreamc.pyx":177
 *         self.kefilters.clear()
 * 
 *     cdef process_kevent_callback(self,  EVENT_RECORD* kevent_trace):             # <<<<<<<<<<<<<<
 *         # remember we can`t use the `self` to refer to the instance
 *         # of the class. In case the better approach to access
 */

  /* function exit code */
  __pyx_r = Py_None; __Pyx_INCREF(Py_None);
  goto __pyx_L0;
  __pyx_L1_error:;
  __Pyx_XDECREF(__pyx_t_1);
  __Pyx_AddTraceback("kstreamc.KEventStreamCollector.process_kevent_callback", __pyx_clineno, __pyx_lineno, __pyx_filename);
  __pyx_r = 0;
  __pyx_L0:;
  __Pyx_XDECREF((PyObject *)__pyx_v_cself);
  __Pyx_XGIVEREF(__pyx_r);
  __Pyx_RefNannyFinishContext();
  return __pyx_r;
}

/* "kstreamc.pyx":185
 *             cself._process_kevent(kevent_trace)
 * 
 *     cdef void _process_kevent(self, EVENT_RECORD* kevent_trace) except *:             # <<<<<<<<<<<<<<
 *         """Kernel event stream callback.
 * 
 */

static void __pyx_f_8kstreamc_21KEventStreamCollector__process_kevent(struct __pyx_obj_8kstreamc_KEventStreamCollector *__pyx_v_self, EVENT_RECORD *__pyx_v_kevent_trace) {
  TRACE_EVENT_INFO *__pyx_v_info;
  ULONG __pyx_v_buffer_size;
  PyObject *__pyx_v_params = 0;
  BYTE *__pyx_v_property_buffer;
  ULONG __pyx_v_property_size;
  PROPERTY_DATA_DESCRIPTOR __pyx_v_descriptor;
  PyObject *__pyx_v_dropped = 0;
  TDHAPI __pyx_v_status;
  BYTE __pyx_v_opcode;
  UCHAR __pyx_v_cpuid;
  ULONG __pyx_v_pid;
  ULONG __pyx_v_tid;
  PyObject *__pyx_v_kevt_type = NULL;
  PyObject *__pyx_v_f = NULL;
  EVENT_PROPERTY_INFO *__pyx_v_props;
  long __pyx_v_i;
  EVENT_PROPERTY_INFO __pyx_v_property;
  LPTSTR __pyx_v_property_name;
  PyObject *__pyx_v_param = NULL;
  PyObject *__pyx_v__property = NULL;
  PyObject *__pyx_v_ts = NULL;
  CYTHON_UNUSED PyObject *__pyx_v_e = NULL;
  __Pyx_RefNannyDeclarations
  PyObject *__pyx_t_1 = NULL;
  PyObject *__pyx_t_2 = NULL;
  PyObject *__pyx_t_3 = NULL;
  PyObject *__pyx_t_4 = NULL;
  int __pyx_t_5;
  PyObject *__pyx_t_6 = NULL;
  int __pyx_t_7;
  PyObject *__pyx_t_8 = NULL;
  Py_ssize_t __pyx_t_9;
  PyObject *(*__pyx_t_10)(PyObject *);
  PyObject *__pyx_t_11 = NULL;
  PyObject *__pyx_t_12 = NULL;
  PyObject *__pyx_t_13 = NULL;
  EVENT_PROPERTY_INFO *__pyx_t_14;
  ULONG __pyx_t_15;
  int __pyx_t_16;
  PyObject *__pyx_t_17 = NULL;
  PyObject *__pyx_t_18 = NULL;
  PyObject *__pyx_t_19 = NULL;
  PyObject *__pyx_t_20 = NULL;
  PyObject *__pyx_t_21 = NULL;
  PyObject *__pyx_t_22 = NULL;
  PyObject *__pyx_t_23 = NULL;
  int __pyx_lineno = 0;
  const char *__pyx_filename = NULL;
  int __pyx_clineno = 0;
  __Pyx_RefNannySetupContext("_process_kevent", 0);

  /* "kstreamc.pyx":195
 * 
 *         """
 *         cdef TRACE_EVENT_INFO* info = <TRACE_EVENT_INFO*> malloc(4096)             # <<<<<<<<<<<<<<
 *         cdef ULONG buffer_size = 4096
 *         cdef params = {}
 */
  __pyx_v_info = ((TRACE_EVENT_INFO *)malloc(0x1000));

  /* "kstreamc.pyx":196
 *         """
 *         cdef TRACE_EVENT_INFO* info = <TRACE_EVENT_INFO*> malloc(4096)
 *         cdef ULONG buffer_size = 4096             # <<<<<<<<<<<<<<
 *         cdef params = {}
 *         cdef BYTE* property_buffer
 */
  __pyx_v_buffer_size = 0x1000;

  /* "kstreamc.pyx":197
 *         cdef TRACE_EVENT_INFO* info = <TRACE_EVENT_INFO*> malloc(4096)
 *         cdef ULONG buffer_size = 4096
 *         cdef params = {}             # <<<<<<<<<<<<<<
 *         cdef BYTE* property_buffer
 *         cdef ULONG property_size
 */
  __pyx_t_1 = PyDict_New(); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 197; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_1);
  __pyx_v_params = __pyx_t_1;
  __pyx_t_1 = 0;

  /* "kstreamc.pyx":201
 *         cdef ULONG property_size
 *         cdef PROPERTY_DATA_DESCRIPTOR descriptor
 *         cdef dropped = False             # <<<<<<<<<<<<<<
 * 
 *         try:
 */
  __Pyx_INCREF(Py_False);
  __pyx_v_dropped = Py_False;

  /* "kstreamc.pyx":203
 *         cdef dropped = False
 * 
 *         try:             # <<<<<<<<<<<<<<
 *             status = TdhGetEventInformation(kevent_trace,
 *                                             0,
 */
  {
    __Pyx_ExceptionSave(&__pyx_t_2, &__pyx_t_3, &__pyx_t_4);
    __Pyx_XGOTREF(__pyx_t_2);
    __Pyx_XGOTREF(__pyx_t_3);
    __Pyx_XGOTREF(__pyx_t_4);
    /*try:*/ {

      /* "kstreamc.pyx":204
 * 
 *         try:
 *             status = TdhGetEventInformation(kevent_trace,             # <<<<<<<<<<<<<<
 *                                             0,
 *                                             NULL,
 */
      __pyx_v_status = TdhGetEventInformation(__pyx_v_kevent_trace, 0, NULL, __pyx_v_info, (&__pyx_v_buffer_size));

      /* "kstreamc.pyx":211
 *             # kernel event type within the
 *             # scope of the event GUID
 *             opcode = <BYTE> kevent_trace.EventHeader.EventDescriptor.Opcode             # <<<<<<<<<<<<<<
 *             # the cpu where the event has been captured
 *             cpuid = <UCHAR> kevent_trace.BufferContext.ProcessorNumber
 */
      __pyx_v_opcode = ((BYTE)__pyx_v_kevent_trace->EventHeader.EventDescriptor.Opcode);

      /* "kstreamc.pyx":213
 *             opcode = <BYTE> kevent_trace.EventHeader.EventDescriptor.Opcode
 *             # the cpu where the event has been captured
 *             cpuid = <UCHAR> kevent_trace.BufferContext.ProcessorNumber             # <<<<<<<<<<<<<<
 *             pid = <ULONG> kevent_trace.EventHeader.ProcessId
 *             tid = <ULONG> kevent_trace.EventHeader.ThreadId
 */
      __pyx_v_cpuid = ((UCHAR)__pyx_v_kevent_trace->BufferContext.ProcessorNumber);

      /* "kstreamc.pyx":214
 *             # the cpu where the event has been captured
 *             cpuid = <UCHAR> kevent_trace.BufferContext.ProcessorNumber
 *             pid = <ULONG> kevent_trace.EventHeader.ProcessId             # <<<<<<<<<<<<<<
 *             tid = <ULONG> kevent_trace.EventHeader.ThreadId
 * 
 */
      __pyx_v_pid = ((ULONG)__pyx_v_kevent_trace->EventHeader.ProcessId);

      /* "kstreamc.pyx":215
 *             cpuid = <UCHAR> kevent_trace.BufferContext.ProcessorNumber
 *             pid = <ULONG> kevent_trace.EventHeader.ProcessId
 *             tid = <ULONG> kevent_trace.EventHeader.ThreadId             # <<<<<<<<<<<<<<
 * 
 *             # we don't want to capture events
 */
      __pyx_v_tid = ((ULONG)__pyx_v_kevent_trace->EventHeader.ThreadId);

      /* "kstreamc.pyx":221
 *             # nor from the process we've declared
 *             # in the excluded process list
 *             if self.own_pid == pid or self._exclude_kevent(pid, tid):             # <<<<<<<<<<<<<<
 *                 free(<void*> info)
 *                 return
 */
      __pyx_t_1 = __Pyx_PyInt_From_ULONG(__pyx_v_pid); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 221; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
      __Pyx_GOTREF(__pyx_t_1);
      __pyx_t_6 = PyObject_RichCompare(__pyx_v_self->own_pid, __pyx_t_1, Py_EQ); __Pyx_XGOTREF(__pyx_t_6); if (unlikely(!__pyx_t_6)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 221; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
      __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0;
      __pyx_t_7 = __Pyx_PyObject_IsTrue(__pyx_t_6); if (unlikely(__pyx_t_7 < 0)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 221; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
      __Pyx_DECREF(__pyx_t_6); __pyx_t_6 = 0;
      if (!__pyx_t_7) {
      } else {
        __pyx_t_5 = __pyx_t_7;
        goto __pyx_L12_bool_binop_done;
      }
      __pyx_t_6 = __Pyx_PyInt_From_ULONG(__pyx_v_pid); if (unlikely(!__pyx_t_6)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 221; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
      __Pyx_GOTREF(__pyx_t_6);
      __pyx_t_1 = __Pyx_PyInt_From_ULONG(__pyx_v_tid); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 221; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
      __Pyx_GOTREF(__pyx_t_1);
      __pyx_t_8 = ((struct __pyx_vtabstruct_8kstreamc_KEventStreamCollector *)__pyx_v_self->__pyx_vtab)->_exclude_kevent(__pyx_v_self, __pyx_t_6, __pyx_t_1); if (unlikely(!__pyx_t_8)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 221; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
      __Pyx_GOTREF(__pyx_t_8);
      __Pyx_DECREF(__pyx_t_6); __pyx_t_6 = 0;
      __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0;
      __pyx_t_7 = __Pyx_PyObject_IsTrue(__pyx_t_8); if (unlikely(__pyx_t_7 < 0)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 221; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
      __Pyx_DECREF(__pyx_t_8); __pyx_t_8 = 0;
      __pyx_t_5 = __pyx_t_7;
      __pyx_L12_bool_binop_done:;
      if (__pyx_t_5) {

        /* "kstreamc.pyx":222
 *             # in the excluded process list
 *             if self.own_pid == pid or self._exclude_kevent(pid, tid):
 *                 free(<void*> info)             # <<<<<<<<<<<<<<
 *                 return
 * 
 */
        free(((void *)__pyx_v_info));

        /* "kstreamc.pyx":223
 *             if self.own_pid == pid or self._exclude_kevent(pid, tid):
 *                 free(<void*> info)
 *                 return             # <<<<<<<<<<<<<<
 * 
 *             # get the event type tuple
 */
        goto __pyx_L7_try_return;

        /* "kstreamc.pyx":221
 *             # nor from the process we've declared
 *             # in the excluded process list
 *             if self.own_pid == pid or self._exclude_kevent(pid, tid):             # <<<<<<<<<<<<<<
 *                 free(<void*> info)
 *                 return
 */
      }

      /* "kstreamc.pyx":228
 *             # and apply filters if they
 *             # are passed from the CLI
 *             kevt_type = self._assemble_type(info.EventGuid, opcode)             # <<<<<<<<<<<<<<
 *             if kevt_type not in self.exclude_from_filters:
 *                 if len(self.kefilters) > 0 and len(self._filters) == 0:
 */
      __pyx_t_8 = ((struct __pyx_vtabstruct_8kstreamc_KEventStreamCollector *)__pyx_v_self->__pyx_vtab)->_assemble_type(__pyx_v_self, __pyx_v_info->EventGuid, __pyx_v_opcode); if (unlikely(!__pyx_t_8)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 228; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
      __Pyx_GOTREF(__pyx_t_8);
      __pyx_v_kevt_type = __pyx_t_8;
      __pyx_t_8 = 0;

      /* "kstreamc.pyx":229
 *             # are passed from the CLI
 *             kevt_type = self._assemble_type(info.EventGuid, opcode)
 *             if kevt_type not in self.exclude_from_filters:             # <<<<<<<<<<<<<<
 *                 if len(self.kefilters) > 0 and len(self._filters) == 0:
 *                     if kevt_type not in self.kefilters:
 */
      __pyx_t_5 = (__Pyx_PySequence_ContainsTF(__pyx_v_kevt_type, __pyx_v_self->exclude_from_filters, Py_NE)); if (unlikely(__pyx_t_5 < 0)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 229; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
      __pyx_t_7 = (__pyx_t_5 != 0);
      if (__pyx_t_7) {

        /* "kstreamc.pyx":230
 *             kevt_type = self._assemble_type(info.EventGuid, opcode)
 *             if kevt_type not in self.exclude_from_filters:
 *                 if len(self.kefilters) > 0 and len(self._filters) == 0:             # <<<<<<<<<<<<<<
 *                     if kevt_type not in self.kefilters:
 *                         dropped = True
 */
        __pyx_t_8 = __pyx_v_self->kefilters;
        __Pyx_INCREF(__pyx_t_8);
        __pyx_t_9 = PyObject_Length(__pyx_t_8); if (unlikely(__pyx_t_9 == -1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 230; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
        __Pyx_DECREF(__pyx_t_8); __pyx_t_8 = 0;
        __pyx_t_5 = ((__pyx_t_9 > 0) != 0);
        if (__pyx_t_5) {
        } else {
          __pyx_t_7 = __pyx_t_5;
          goto __pyx_L16_bool_binop_done;
        }
        __pyx_t_8 = __pyx_v_self->_filters;
        __Pyx_INCREF(__pyx_t_8);
        __pyx_t_9 = PyObject_Length(__pyx_t_8); if (unlikely(__pyx_t_9 == -1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 230; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
        __Pyx_DECREF(__pyx_t_8); __pyx_t_8 = 0;
        __pyx_t_5 = ((__pyx_t_9 == 0) != 0);
        __pyx_t_7 = __pyx_t_5;
        __pyx_L16_bool_binop_done:;
        if (__pyx_t_7) {

          /* "kstreamc.pyx":231
 *             if kevt_type not in self.exclude_from_filters:
 *                 if len(self.kefilters) > 0 and len(self._filters) == 0:
 *                     if kevt_type not in self.kefilters:             # <<<<<<<<<<<<<<
 *                         dropped = True
 *                 elif len(self.kefilters) > 0 and len(self._filters) > 0:
 */
          __pyx_t_7 = (__Pyx_PySequence_ContainsTF(__pyx_v_kevt_type, __pyx_v_self->kefilters, Py_NE)); if (unlikely(__pyx_t_7 < 0)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 231; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
          __pyx_t_5 = (__pyx_t_7 != 0);
          if (__pyx_t_5) {

            /* "kstreamc.pyx":232
 *                 if len(self.kefilters) > 0 and len(self._filters) == 0:
 *                     if kevt_type not in self.kefilters:
 *                         dropped = True             # <<<<<<<<<<<<<<
 *                 elif len(self.kefilters) > 0 and len(self._filters) > 0:
 *                     for f in self._filters:
 */
            __Pyx_INCREF(Py_True);
            __Pyx_DECREF_SET(__pyx_v_dropped, Py_True);

            /* "kstreamc.pyx":231
 *             if kevt_type not in self.exclude_from_filters:
 *                 if len(self.kefilters) > 0 and len(self._filters) == 0:
 *                     if kevt_type not in self.kefilters:             # <<<<<<<<<<<<<<
 *                         dropped = True
 *                 elif len(self.kefilters) > 0 and len(self._filters) > 0:
 */
          }

          /* "kstreamc.pyx":230
 *             kevt_type = self._assemble_type(info.EventGuid, opcode)
 *             if kevt_type not in self.exclude_from_filters:
 *                 if len(self.kefilters) > 0 and len(self._filters) == 0:             # <<<<<<<<<<<<<<
 *                     if kevt_type not in self.kefilters:
 *                         dropped = True
 */
          goto __pyx_L15;
        }

        /* "kstreamc.pyx":233
 *                     if kevt_type not in self.kefilters:
 *                         dropped = True
 *                 elif len(self.kefilters) > 0 and len(self._filters) > 0:             # <<<<<<<<<<<<<<
 *                     for f in self._filters:
 *                         dropped = f(pid)
 */
        __pyx_t_8 = __pyx_v_self->kefilters;
        __Pyx_INCREF(__pyx_t_8);
        __pyx_t_9 = PyObject_Length(__pyx_t_8); if (unlikely(__pyx_t_9 == -1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 233; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
        __Pyx_DECREF(__pyx_t_8); __pyx_t_8 = 0;
        __pyx_t_7 = ((__pyx_t_9 > 0) != 0);
        if (__pyx_t_7) {
        } else {
          __pyx_t_5 = __pyx_t_7;
          goto __pyx_L19_bool_binop_done;
        }
        __pyx_t_8 = __pyx_v_self->_filters;
        __Pyx_INCREF(__pyx_t_8);
        __pyx_t_9 = PyObject_Length(__pyx_t_8); if (unlikely(__pyx_t_9 == -1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 233; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
        __Pyx_DECREF(__pyx_t_8); __pyx_t_8 = 0;
        __pyx_t_7 = ((__pyx_t_9 > 0) != 0);
        __pyx_t_5 = __pyx_t_7;
        __pyx_L19_bool_binop_done:;
        if (__pyx_t_5) {

          /* "kstreamc.pyx":234
 *                         dropped = True
 *                 elif len(self.kefilters) > 0 and len(self._filters) > 0:
 *                     for f in self._filters:             # <<<<<<<<<<<<<<
 *                         dropped = f(pid)
 *                 elif len(self._filters) > 0:
 */
          if (likely(PyList_CheckExact(__pyx_v_self->_filters)) || PyTuple_CheckExact(__pyx_v_self->_filters)) {
            __pyx_t_8 = __pyx_v_self->_filters; __Pyx_INCREF(__pyx_t_8); __pyx_t_9 = 0;
            __pyx_t_10 = NULL;
          } else {
            __pyx_t_9 = -1; __pyx_t_8 = PyObject_GetIter(__pyx_v_self->_filters); if (unlikely(!__pyx_t_8)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 234; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
            __Pyx_GOTREF(__pyx_t_8);
            __pyx_t_10 = Py_TYPE(__pyx_t_8)->tp_iternext; if (unlikely(!__pyx_t_10)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 234; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
          }
          for (;;) {
            if (likely(!__pyx_t_10)) {
              if (likely(PyList_CheckExact(__pyx_t_8))) {
                if (__pyx_t_9 >= PyList_GET_SIZE(__pyx_t_8)) break;
                #if CYTHON_COMPILING_IN_CPYTHON
                __pyx_t_1 = PyList_GET_ITEM(__pyx_t_8, __pyx_t_9); __Pyx_INCREF(__pyx_t_1); __pyx_t_9++; if (unlikely(0 < 0)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 234; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
                #else
                __pyx_t_1 = PySequence_ITEM(__pyx_t_8, __pyx_t_9); __pyx_t_9++; if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 234; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
                __Pyx_GOTREF(__pyx_t_1);
                #endif
              } else {
                if (__pyx_t_9 >= PyTuple_GET_SIZE(__pyx_t_8)) break;
                #if CYTHON_COMPILING_IN_CPYTHON
                __pyx_t_1 = PyTuple_GET_ITEM(__pyx_t_8, __pyx_t_9); __Pyx_INCREF(__pyx_t_1); __pyx_t_9++; if (unlikely(0 < 0)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 234; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
                #else
                __pyx_t_1 = PySequence_ITEM(__pyx_t_8, __pyx_t_9); __pyx_t_9++; if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 234; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
                __Pyx_GOTREF(__pyx_t_1);
                #endif
              }
            } else {
              __pyx_t_1 = __pyx_t_10(__pyx_t_8);
              if (unlikely(!__pyx_t_1)) {
                PyObject* exc_type = PyErr_Occurred();
                if (exc_type) {
                  if (likely(exc_type == PyExc_StopIteration || PyErr_GivenExceptionMatches(exc_type, PyExc_StopIteration))) PyErr_Clear();
                  else {__pyx_filename = __pyx_f[0]; __pyx_lineno = 234; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
                }
                break;
              }
              __Pyx_GOTREF(__pyx_t_1);
            }
            __Pyx_XDECREF_SET(__pyx_v_f, __pyx_t_1);
            __pyx_t_1 = 0;

            /* "kstreamc.pyx":235
 *                 elif len(self.kefilters) > 0 and len(self._filters) > 0:
 *                     for f in self._filters:
 *                         dropped = f(pid)             # <<<<<<<<<<<<<<
 *                 elif len(self._filters) > 0:
 *                     for f in self._filters:
 */
            __pyx_t_6 = __Pyx_PyInt_From_ULONG(__pyx_v_pid); if (unlikely(!__pyx_t_6)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 235; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
            __Pyx_GOTREF(__pyx_t_6);
            __Pyx_INCREF(__pyx_v_f);
            __pyx_t_11 = __pyx_v_f; __pyx_t_12 = NULL;
            if (CYTHON_COMPILING_IN_CPYTHON && unlikely(PyMethod_Check(__pyx_t_11))) {
              __pyx_t_12 = PyMethod_GET_SELF(__pyx_t_11);
              if (likely(__pyx_t_12)) {
                PyObject* function = PyMethod_GET_FUNCTION(__pyx_t_11);
                __Pyx_INCREF(__pyx_t_12);
                __Pyx_INCREF(function);
                __Pyx_DECREF_SET(__pyx_t_11, function);
              }
            }
            if (!__pyx_t_12) {
              __pyx_t_1 = __Pyx_PyObject_CallOneArg(__pyx_t_11, __pyx_t_6); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 235; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
              __Pyx_DECREF(__pyx_t_6); __pyx_t_6 = 0;
              __Pyx_GOTREF(__pyx_t_1);
            } else {
              __pyx_t_13 = PyTuple_New(1+1); if (unlikely(!__pyx_t_13)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 235; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
              __Pyx_GOTREF(__pyx_t_13);
              __Pyx_GIVEREF(__pyx_t_12); PyTuple_SET_ITEM(__pyx_t_13, 0, __pyx_t_12); __pyx_t_12 = NULL;
              __Pyx_GIVEREF(__pyx_t_6);
              PyTuple_SET_ITEM(__pyx_t_13, 0+1, __pyx_t_6);
              __pyx_t_6 = 0;
              __pyx_t_1 = __Pyx_PyObject_Call(__pyx_t_11, __pyx_t_13, NULL); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 235; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
              __Pyx_GOTREF(__pyx_t_1);
              __Pyx_DECREF(__pyx_t_13); __pyx_t_13 = 0;
            }
            __Pyx_DECREF(__pyx_t_11); __pyx_t_11 = 0;
            __Pyx_DECREF_SET(__pyx_v_dropped, __pyx_t_1);
            __pyx_t_1 = 0;

            /* "kstreamc.pyx":234
 *                         dropped = True
 *                 elif len(self.kefilters) > 0 and len(self._filters) > 0:
 *                     for f in self._filters:             # <<<<<<<<<<<<<<
 *                         dropped = f(pid)
 *                 elif len(self._filters) > 0:
 */
          }
          __Pyx_DECREF(__pyx_t_8); __pyx_t_8 = 0;

          /* "kstreamc.pyx":233
 *                     if kevt_type not in self.kefilters:
 *                         dropped = True
 *                 elif len(self.kefilters) > 0 and len(self._filters) > 0:             # <<<<<<<<<<<<<<
 *                     for f in self._filters:
 *                         dropped = f(pid)
 */
          goto __pyx_L15;
        }

        /* "kstreamc.pyx":236
 *                     for f in self._filters:
 *                         dropped = f(pid)
 *                 elif len(self._filters) > 0:             # <<<<<<<<<<<<<<
 *                     for f in self._filters:
 *                         dropped = f(pid)
 */
        __pyx_t_8 = __pyx_v_self->_filters;
        __Pyx_INCREF(__pyx_t_8);
        __pyx_t_9 = PyObject_Length(__pyx_t_8); if (unlikely(__pyx_t_9 == -1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 236; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
        __Pyx_DECREF(__pyx_t_8); __pyx_t_8 = 0;
        __pyx_t_5 = ((__pyx_t_9 > 0) != 0);
        if (__pyx_t_5) {

          /* "kstreamc.pyx":237
 *                         dropped = f(pid)
 *                 elif len(self._filters) > 0:
 *                     for f in self._filters:             # <<<<<<<<<<<<<<
 *                         dropped = f(pid)
 * 
 */
          if (likely(PyList_CheckExact(__pyx_v_self->_filters)) || PyTuple_CheckExact(__pyx_v_self->_filters)) {
            __pyx_t_8 = __pyx_v_self->_filters; __Pyx_INCREF(__pyx_t_8); __pyx_t_9 = 0;
            __pyx_t_10 = NULL;
          } else {
            __pyx_t_9 = -1; __pyx_t_8 = PyObject_GetIter(__pyx_v_self->_filters); if (unlikely(!__pyx_t_8)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 237; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
            __Pyx_GOTREF(__pyx_t_8);
            __pyx_t_10 = Py_TYPE(__pyx_t_8)->tp_iternext; if (unlikely(!__pyx_t_10)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 237; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
          }
          for (;;) {
            if (likely(!__pyx_t_10)) {
              if (likely(PyList_CheckExact(__pyx_t_8))) {
                if (__pyx_t_9 >= PyList_GET_SIZE(__pyx_t_8)) break;
                #if CYTHON_COMPILING_IN_CPYTHON
                __pyx_t_1 = PyList_GET_ITEM(__pyx_t_8, __pyx_t_9); __Pyx_INCREF(__pyx_t_1); __pyx_t_9++; if (unlikely(0 < 0)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 237; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
                #else
                __pyx_t_1 = PySequence_ITEM(__pyx_t_8, __pyx_t_9); __pyx_t_9++; if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 237; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
                __Pyx_GOTREF(__pyx_t_1);
                #endif
              } else {
                if (__pyx_t_9 >= PyTuple_GET_SIZE(__pyx_t_8)) break;
                #if CYTHON_COMPILING_IN_CPYTHON
                __pyx_t_1 = PyTuple_GET_ITEM(__pyx_t_8, __pyx_t_9); __Pyx_INCREF(__pyx_t_1); __pyx_t_9++; if (unlikely(0 < 0)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 237; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
                #else
                __pyx_t_1 = PySequence_ITEM(__pyx_t_8, __pyx_t_9); __pyx_t_9++; if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 237; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
                __Pyx_GOTREF(__pyx_t_1);
                #endif
              }
            } else {
              __pyx_t_1 = __pyx_t_10(__pyx_t_8);
              if (unlikely(!__pyx_t_1)) {
                PyObject* exc_type = PyErr_Occurred();
                if (exc_type) {
                  if (likely(exc_type == PyExc_StopIteration || PyErr_GivenExceptionMatches(exc_type, PyExc_StopIteration))) PyErr_Clear();
                  else {__pyx_filename = __pyx_f[0]; __pyx_lineno = 237; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
                }
                break;
              }
              __Pyx_GOTREF(__pyx_t_1);
            }
            __Pyx_XDECREF_SET(__pyx_v_f, __pyx_t_1);
            __pyx_t_1 = 0;

            /* "kstreamc.pyx":238
 *                 elif len(self._filters) > 0:
 *                     for f in self._filters:
 *                         dropped = f(pid)             # <<<<<<<<<<<<<<
 * 
 *                 # we got an invalid pid from the header
 */
            __pyx_t_11 = __Pyx_PyInt_From_ULONG(__pyx_v_pid); if (unlikely(!__pyx_t_11)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 238; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
            __Pyx_GOTREF(__pyx_t_11);
            __Pyx_INCREF(__pyx_v_f);
            __pyx_t_13 = __pyx_v_f; __pyx_t_6 = NULL;
            if (CYTHON_COMPILING_IN_CPYTHON && unlikely(PyMethod_Check(__pyx_t_13))) {
              __pyx_t_6 = PyMethod_GET_SELF(__pyx_t_13);
              if (likely(__pyx_t_6)) {
                PyObject* function = PyMethod_GET_FUNCTION(__pyx_t_13);
                __Pyx_INCREF(__pyx_t_6);
                __Pyx_INCREF(function);
                __Pyx_DECREF_SET(__pyx_t_13, function);
              }
            }
            if (!__pyx_t_6) {
              __pyx_t_1 = __Pyx_PyObject_CallOneArg(__pyx_t_13, __pyx_t_11); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 238; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
              __Pyx_DECREF(__pyx_t_11); __pyx_t_11 = 0;
              __Pyx_GOTREF(__pyx_t_1);
            } else {
              __pyx_t_12 = PyTuple_New(1+1); if (unlikely(!__pyx_t_12)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 238; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
              __Pyx_GOTREF(__pyx_t_12);
              __Pyx_GIVEREF(__pyx_t_6); PyTuple_SET_ITEM(__pyx_t_12, 0, __pyx_t_6); __pyx_t_6 = NULL;
              __Pyx_GIVEREF(__pyx_t_11);
              PyTuple_SET_ITEM(__pyx_t_12, 0+1, __pyx_t_11);
              __pyx_t_11 = 0;
              __pyx_t_1 = __Pyx_PyObject_Call(__pyx_t_13, __pyx_t_12, NULL); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 238; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
              __Pyx_GOTREF(__pyx_t_1);
              __Pyx_DECREF(__pyx_t_12); __pyx_t_12 = 0;
            }
            __Pyx_DECREF(__pyx_t_13); __pyx_t_13 = 0;
            __Pyx_DECREF_SET(__pyx_v_dropped, __pyx_t_1);
            __pyx_t_1 = 0;

            /* "kstreamc.pyx":237
 *                         dropped = f(pid)
 *                 elif len(self._filters) > 0:
 *                     for f in self._filters:             # <<<<<<<<<<<<<<
 *                         dropped = f(pid)
 * 
 */
          }
          __Pyx_DECREF(__pyx_t_8); __pyx_t_8 = 0;

          /* "kstreamc.pyx":236
 *                     for f in self._filters:
 *                         dropped = f(pid)
 *                 elif len(self._filters) > 0:             # <<<<<<<<<<<<<<
 *                     for f in self._filters:
 *                         dropped = f(pid)
 */
        }
        __pyx_L15:;

        /* "kstreamc.pyx":242
 *                 # we got an invalid pid from the header
 *                 # and we can't still drop the event
 *                 if pid == 0xFFFFFFFF:             # <<<<<<<<<<<<<<
 *                     dropped = False
 * 
 */
        __pyx_t_8 = __Pyx_PyInt_From_ULONG(__pyx_v_pid); if (unlikely(!__pyx_t_8)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 242; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
        __Pyx_GOTREF(__pyx_t_8);
        __pyx_t_1 = PyObject_RichCompare(__pyx_t_8, __pyx_int_4294967295, Py_EQ); __Pyx_XGOTREF(__pyx_t_1); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 242; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
        __Pyx_DECREF(__pyx_t_8); __pyx_t_8 = 0;
        __pyx_t_5 = __Pyx_PyObject_IsTrue(__pyx_t_1); if (unlikely(__pyx_t_5 < 0)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 242; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
        __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0;
        if (__pyx_t_5) {

          /* "kstreamc.pyx":243
 *                 # and we can't still drop the event
 *                 if pid == 0xFFFFFFFF:
 *                     dropped = False             # <<<<<<<<<<<<<<
 * 
 *             if not dropped:
 */
          __Pyx_INCREF(Py_False);
          __Pyx_DECREF_SET(__pyx_v_dropped, Py_False);

          /* "kstreamc.pyx":242
 *                 # we got an invalid pid from the header
 *                 # and we can't still drop the event
 *                 if pid == 0xFFFFFFFF:             # <<<<<<<<<<<<<<
 *                     dropped = False
 * 
 */
        }

        /* "kstreamc.pyx":229
 *             # are passed from the CLI
 *             kevt_type = self._assemble_type(info.EventGuid, opcode)
 *             if kevt_type not in self.exclude_from_filters:             # <<<<<<<<<<<<<<
 *                 if len(self.kefilters) > 0 and len(self._filters) == 0:
 *                     if kevt_type not in self.kefilters:
 */
      }

      /* "kstreamc.pyx":245
 *                     dropped = False
 * 
 *             if not dropped:             # <<<<<<<<<<<<<<
 *                 if (kevent_trace.EventHeader.Flags & EVENT_HEADER_FLAG_32_BIT_HEADER) == \
 *                         EVENT_HEADER_FLAG_32_BIT_HEADER:
 */
      __pyx_t_5 = __Pyx_PyObject_IsTrue(__pyx_v_dropped); if (unlikely(__pyx_t_5 < 0)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 245; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
      __pyx_t_7 = ((!__pyx_t_5) != 0);
      if (__pyx_t_7) {

        /* "kstreamc.pyx":246
 * 
 *             if not dropped:
 *                 if (kevent_trace.EventHeader.Flags & EVENT_HEADER_FLAG_32_BIT_HEADER) == \             # <<<<<<<<<<<<<<
 *                         EVENT_HEADER_FLAG_32_BIT_HEADER:
 *                     self.pointer_size = 4
 */
        __pyx_t_7 = (((__pyx_v_kevent_trace->EventHeader.Flags & EVENT_HEADER_FLAG_32_BIT_HEADER) == EVENT_HEADER_FLAG_32_BIT_HEADER) != 0);
        if (__pyx_t_7) {

          /* "kstreamc.pyx":248
 *                 if (kevent_trace.EventHeader.Flags & EVENT_HEADER_FLAG_32_BIT_HEADER) == \
 *                         EVENT_HEADER_FLAG_32_BIT_HEADER:
 *                     self.pointer_size = 4             # <<<<<<<<<<<<<<
 *                 else:
 *                     self.pointer_size = 8
 */
          __Pyx_INCREF(__pyx_int_4);
          __Pyx_GIVEREF(__pyx_int_4);
          __Pyx_GOTREF(__pyx_v_self->pointer_size);
          __Pyx_DECREF(__pyx_v_self->pointer_size);
          __pyx_v_self->pointer_size = __pyx_int_4;

          /* "kstreamc.pyx":246
 * 
 *             if not dropped:
 *                 if (kevent_trace.EventHeader.Flags & EVENT_HEADER_FLAG_32_BIT_HEADER) == \             # <<<<<<<<<<<<<<
 *                         EVENT_HEADER_FLAG_32_BIT_HEADER:
 *                     self.pointer_size = 4
 */
          goto __pyx_L27;
        }

        /* "kstreamc.pyx":250
 *                     self.pointer_size = 4
 *                 else:
 *                     self.pointer_size = 8             # <<<<<<<<<<<<<<
 * 
 *                 # the call has succeed. We loop over event properties
 */
        /*else*/ {
          __Pyx_INCREF(__pyx_int_8);
          __Pyx_GIVEREF(__pyx_int_8);
          __Pyx_GOTREF(__pyx_v_self->pointer_size);
          __Pyx_DECREF(__pyx_v_self->pointer_size);
          __pyx_v_self->pointer_size = __pyx_int_8;
        }
        __pyx_L27:;

        /* "kstreamc.pyx":257
 *                 # `TRACE_EVENT_INFO` structure once we had
 *                 # parsed the event properties. Otherwise, memory leaks can occur
 *                 if status == ERROR_SUCCESS:             # <<<<<<<<<<<<<<
 *                     props = info.EventPropertyInfoArray
 *                     for i from 0 <= i < info.TopLevelPropertyCount:
 */
        __pyx_t_7 = ((__pyx_v_status == ERROR_SUCCESS) != 0);
        if (__pyx_t_7) {

          /* "kstreamc.pyx":258
 *                 # parsed the event properties. Otherwise, memory leaks can occur
 *                 if status == ERROR_SUCCESS:
 *                     props = info.EventPropertyInfoArray             # <<<<<<<<<<<<<<
 *                     for i from 0 <= i < info.TopLevelPropertyCount:
 *                         property = <EVENT_PROPERTY_INFO> props[i]
 */
          __pyx_t_14 = __pyx_v_info->EventPropertyInfoArray;
          __pyx_v_props = __pyx_t_14;

          /* "kstreamc.pyx":259
 *                 if status == ERROR_SUCCESS:
 *                     props = info.EventPropertyInfoArray
 *                     for i from 0 <= i < info.TopLevelPropertyCount:             # <<<<<<<<<<<<<<
 *                         property = <EVENT_PROPERTY_INFO> props[i]
 * 
 */
          __pyx_t_15 = __pyx_v_info->TopLevelPropertyCount;
          for (__pyx_v_i = 0; __pyx_v_i < __pyx_t_15; __pyx_v_i++) {

            /* "kstreamc.pyx":260
 *                     props = info.EventPropertyInfoArray
 *                     for i from 0 <= i < info.TopLevelPropertyCount:
 *                         property = <EVENT_PROPERTY_INFO> props[i]             # <<<<<<<<<<<<<<
 * 
 *                         property_name = <LPTSTR><BYTE*>info + property.NameOffset
 */
            __pyx_v_property = (__pyx_v_props[__pyx_v_i]);

            /* "kstreamc.pyx":262
 *                         property = <EVENT_PROPERTY_INFO> props[i]
 * 
 *                         property_name = <LPTSTR><BYTE*>info + property.NameOffset             # <<<<<<<<<<<<<<
 * 
 *                         # initialize the descriptor
 */
            __pyx_v_property_name = (((LPTSTR)((BYTE *)__pyx_v_info)) + __pyx_v_property.NameOffset);

            /* "kstreamc.pyx":266
 *                         # initialize the descriptor
 *                         # with the property name
 *                         descriptor.PropertyName = <ULONGLONG><BYTE*>info + property.NameOffset             # <<<<<<<<<<<<<<
 *                         descriptor.ArrayIndex = 0xFFFFFFFF
 * 
 */
            __pyx_v_descriptor.PropertyName = (((ULONGLONG)((BYTE *)__pyx_v_info)) + __pyx_v_property.NameOffset);

            /* "kstreamc.pyx":267
 *                         # with the property name
 *                         descriptor.PropertyName = <ULONGLONG><BYTE*>info + property.NameOffset
 *                         descriptor.ArrayIndex = 0xFFFFFFFF             # <<<<<<<<<<<<<<
 * 
 *                         # get the property size which
 */
            __pyx_v_descriptor.ArrayIndex = 0xFFFFFFFF;

            /* "kstreamc.pyx":271
 *                         # get the property size which
 *                         # is used to allocate the buffer
 *                         TdhGetPropertySize(kevent_trace, 0, NULL,             # <<<<<<<<<<<<<<
 *                                            1,
 *                                            &descriptor,
 */
            TdhGetPropertySize(__pyx_v_kevent_trace, 0, NULL, 1, (&__pyx_v_descriptor), (&__pyx_v_property_size));

            /* "kstreamc.pyx":275
 *                                            &descriptor,
 *                                            &property_size)
 *                         property_buffer = <BYTE* > malloc(property_size)             # <<<<<<<<<<<<<<
 * 
 *                         # fill the property buffer
 */
            __pyx_v_property_buffer = ((BYTE *)malloc(__pyx_v_property_size));

            /* "kstreamc.pyx":278
 * 
 *                         # fill the property buffer
 *                         status = TdhGetProperty(kevent_trace, 0, NULL,             # <<<<<<<<<<<<<<
 *                                                 1,
 *                                                 &descriptor,
 */
            __pyx_v_status = TdhGetProperty(__pyx_v_kevent_trace, 0, NULL, 1, (&__pyx_v_descriptor), __pyx_v_property_size, __pyx_v_property_buffer);

            /* "kstreamc.pyx":285
 *                         # get the property value and store
 *                         # it in the parameter dictionary
 *                         if status == ERROR_SUCCESS:             # <<<<<<<<<<<<<<
 *                             param = self._parse_property(property.nonStructType.InType,
 *                                                          property.nonStructType.OutType,
 */
            __pyx_t_7 = ((__pyx_v_status == ERROR_SUCCESS) != 0);
            if (__pyx_t_7) {

              /* "kstreamc.pyx":286
 *                         # it in the parameter dictionary
 *                         if status == ERROR_SUCCESS:
 *                             param = self._parse_property(property.nonStructType.InType,             # <<<<<<<<<<<<<<
 *                                                          property.nonStructType.OutType,
 *                                                          property_buffer)
 */
              __pyx_t_1 = ((struct __pyx_vtabstruct_8kstreamc_KEventStreamCollector *)__pyx_v_self->__pyx_vtab)->_parse_property(__pyx_v_self, __pyx_v_property.nonStructType.InType, __pyx_v_property.nonStructType.OutType, __pyx_v_property_buffer); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 286; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
              __Pyx_GOTREF(__pyx_t_1);
              __Pyx_XDECREF_SET(__pyx_v_param, __pyx_t_1);
              __pyx_t_1 = 0;

              /* "kstreamc.pyx":292
 *                             # camel case to underscore so we have
 *                             # PEP 8 compliant coding style
 *                             _property = self.property_regex.sub(r'_\1', property_name).lower()             # <<<<<<<<<<<<<<
 *                             if _property in self.exclude_pid_props:
 *                                 if self.own_pid == param:
 */
              __pyx_t_13 = __Pyx_PyObject_GetAttrStr(__pyx_v_self->property_regex, __pyx_n_s_sub); if (unlikely(!__pyx_t_13)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 292; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
              __Pyx_GOTREF(__pyx_t_13);
              __pyx_t_12 = __Pyx_PyUnicode_FromUnicode(__pyx_v_property_name); if (unlikely(!__pyx_t_12)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 292; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
              __Pyx_GOTREF(__pyx_t_12);
              __pyx_t_11 = NULL;
              __pyx_t_9 = 0;
              if (CYTHON_COMPILING_IN_CPYTHON && likely(PyMethod_Check(__pyx_t_13))) {
                __pyx_t_11 = PyMethod_GET_SELF(__pyx_t_13);
                if (likely(__pyx_t_11)) {
                  PyObject* function = PyMethod_GET_FUNCTION(__pyx_t_13);
                  __Pyx_INCREF(__pyx_t_11);
                  __Pyx_INCREF(function);
                  __Pyx_DECREF_SET(__pyx_t_13, function);
                  __pyx_t_9 = 1;
                }
              }
              __pyx_t_6 = PyTuple_New(2+__pyx_t_9); if (unlikely(!__pyx_t_6)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 292; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
              __Pyx_GOTREF(__pyx_t_6);
              if (__pyx_t_11) {
                __Pyx_GIVEREF(__pyx_t_11); PyTuple_SET_ITEM(__pyx_t_6, 0, __pyx_t_11); __pyx_t_11 = NULL;
              }
              __Pyx_INCREF(__pyx_kp_s_1);
              __Pyx_GIVEREF(__pyx_kp_s_1);
              PyTuple_SET_ITEM(__pyx_t_6, 0+__pyx_t_9, __pyx_kp_s_1);
              __Pyx_GIVEREF(__pyx_t_12);
              PyTuple_SET_ITEM(__pyx_t_6, 1+__pyx_t_9, __pyx_t_12);
              __pyx_t_12 = 0;
              __pyx_t_8 = __Pyx_PyObject_Call(__pyx_t_13, __pyx_t_6, NULL); if (unlikely(!__pyx_t_8)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 292; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
              __Pyx_GOTREF(__pyx_t_8);
              __Pyx_DECREF(__pyx_t_6); __pyx_t_6 = 0;
              __Pyx_DECREF(__pyx_t_13); __pyx_t_13 = 0;
              __pyx_t_13 = __Pyx_PyObject_GetAttrStr(__pyx_t_8, __pyx_n_s_lower); if (unlikely(!__pyx_t_13)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 292; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
              __Pyx_GOTREF(__pyx_t_13);
              __Pyx_DECREF(__pyx_t_8); __pyx_t_8 = 0;
              __pyx_t_8 = NULL;
              if (CYTHON_COMPILING_IN_CPYTHON && likely(PyMethod_Check(__pyx_t_13))) {
                __pyx_t_8 = PyMethod_GET_SELF(__pyx_t_13);
                if (likely(__pyx_t_8)) {
                  PyObject* function = PyMethod_GET_FUNCTION(__pyx_t_13);
                  __Pyx_INCREF(__pyx_t_8);
                  __Pyx_INCREF(function);
                  __Pyx_DECREF_SET(__pyx_t_13, function);
                }
              }
              if (__pyx_t_8) {
                __pyx_t_1 = __Pyx_PyObject_CallOneArg(__pyx_t_13, __pyx_t_8); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 292; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
                __Pyx_DECREF(__pyx_t_8); __pyx_t_8 = 0;
              } else {
                __pyx_t_1 = __Pyx_PyObject_CallNoArg(__pyx_t_13); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 292; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
              }
              __Pyx_GOTREF(__pyx_t_1);
              __Pyx_DECREF(__pyx_t_13); __pyx_t_13 = 0;
              __Pyx_XDECREF_SET(__pyx_v__property, __pyx_t_1);
              __pyx_t_1 = 0;

              /* "kstreamc.pyx":293
 *                             # PEP 8 compliant coding style
 *                             _property = self.property_regex.sub(r'_\1', property_name).lower()
 *                             if _property in self.exclude_pid_props:             # <<<<<<<<<<<<<<
 *                                 if self.own_pid == param:
 *                                     self._free_buffers(info, property_buffer)
 */
              __pyx_t_7 = (__Pyx_PySequence_ContainsTF(__pyx_v__property, __pyx_v_self->exclude_pid_props, Py_EQ)); if (unlikely(__pyx_t_7 < 0)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 293; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
              __pyx_t_5 = (__pyx_t_7 != 0);
              if (__pyx_t_5) {

                /* "kstreamc.pyx":294
 *                             _property = self.property_regex.sub(r'_\1', property_name).lower()
 *                             if _property in self.exclude_pid_props:
 *                                 if self.own_pid == param:             # <<<<<<<<<<<<<<
 *                                     self._free_buffers(info, property_buffer)
 *                                     return
 */
                __pyx_t_1 = PyObject_RichCompare(__pyx_v_self->own_pid, __pyx_v_param, Py_EQ); __Pyx_XGOTREF(__pyx_t_1); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 294; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
                __pyx_t_5 = __Pyx_PyObject_IsTrue(__pyx_t_1); if (unlikely(__pyx_t_5 < 0)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 294; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
                __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0;
                if (__pyx_t_5) {

                  /* "kstreamc.pyx":295
 *                             if _property in self.exclude_pid_props:
 *                                 if self.own_pid == param:
 *                                     self._free_buffers(info, property_buffer)             # <<<<<<<<<<<<<<
 *                                     return
 *                                 elif len(self._filters) > 0:
 */
                  __pyx_t_1 = ((struct __pyx_vtabstruct_8kstreamc_KEventStreamCollector *)__pyx_v_self->__pyx_vtab)->_free_buffers(__pyx_v_self, __pyx_v_info, __pyx_v_property_buffer); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 295; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
                  __Pyx_GOTREF(__pyx_t_1);
                  __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0;

                  /* "kstreamc.pyx":296
 *                                 if self.own_pid == param:
 *                                     self._free_buffers(info, property_buffer)
 *                                     return             # <<<<<<<<<<<<<<
 *                                 elif len(self._filters) > 0:
 *                                     if kevt_type not in self.exclude_from_filters:
 */
                  goto __pyx_L7_try_return;

                  /* "kstreamc.pyx":294
 *                             _property = self.property_regex.sub(r'_\1', property_name).lower()
 *                             if _property in self.exclude_pid_props:
 *                                 if self.own_pid == param:             # <<<<<<<<<<<<<<
 *                                     self._free_buffers(info, property_buffer)
 *                                     return
 */
                }

                /* "kstreamc.pyx":297
 *                                     self._free_buffers(info, property_buffer)
 *                                     return
 *                                 elif len(self._filters) > 0:             # <<<<<<<<<<<<<<
 *                                     if kevt_type not in self.exclude_from_filters:
 *                                         for f in self._filters:
 */
                __pyx_t_1 = __pyx_v_self->_filters;
                __Pyx_INCREF(__pyx_t_1);
                __pyx_t_9 = PyObject_Length(__pyx_t_1); if (unlikely(__pyx_t_9 == -1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 297; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
                __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0;
                __pyx_t_5 = ((__pyx_t_9 > 0) != 0);
                if (__pyx_t_5) {

                  /* "kstreamc.pyx":298
 *                                     return
 *                                 elif len(self._filters) > 0:
 *                                     if kevt_type not in self.exclude_from_filters:             # <<<<<<<<<<<<<<
 *                                         for f in self._filters:
 *                                             if f(param):
 */
                  __pyx_t_5 = (__Pyx_PySequence_ContainsTF(__pyx_v_kevt_type, __pyx_v_self->exclude_from_filters, Py_NE)); if (unlikely(__pyx_t_5 < 0)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 298; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
                  __pyx_t_7 = (__pyx_t_5 != 0);
                  if (__pyx_t_7) {

                    /* "kstreamc.pyx":299
 *                                 elif len(self._filters) > 0:
 *                                     if kevt_type not in self.exclude_from_filters:
 *                                         for f in self._filters:             # <<<<<<<<<<<<<<
 *                                             if f(param):
 *                                                 self._free_buffers(info, property_buffer)
 */
                    if (likely(PyList_CheckExact(__pyx_v_self->_filters)) || PyTuple_CheckExact(__pyx_v_self->_filters)) {
                      __pyx_t_1 = __pyx_v_self->_filters; __Pyx_INCREF(__pyx_t_1); __pyx_t_9 = 0;
                      __pyx_t_10 = NULL;
                    } else {
                      __pyx_t_9 = -1; __pyx_t_1 = PyObject_GetIter(__pyx_v_self->_filters); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 299; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
                      __Pyx_GOTREF(__pyx_t_1);
                      __pyx_t_10 = Py_TYPE(__pyx_t_1)->tp_iternext; if (unlikely(!__pyx_t_10)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 299; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
                    }
                    for (;;) {
                      if (likely(!__pyx_t_10)) {
                        if (likely(PyList_CheckExact(__pyx_t_1))) {
                          if (__pyx_t_9 >= PyList_GET_SIZE(__pyx_t_1)) break;
                          #if CYTHON_COMPILING_IN_CPYTHON
                          __pyx_t_13 = PyList_GET_ITEM(__pyx_t_1, __pyx_t_9); __Pyx_INCREF(__pyx_t_13); __pyx_t_9++; if (unlikely(0 < 0)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 299; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
                          #else
                          __pyx_t_13 = PySequence_ITEM(__pyx_t_1, __pyx_t_9); __pyx_t_9++; if (unlikely(!__pyx_t_13)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 299; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
                          __Pyx_GOTREF(__pyx_t_13);
                          #endif
                        } else {
                          if (__pyx_t_9 >= PyTuple_GET_SIZE(__pyx_t_1)) break;
                          #if CYTHON_COMPILING_IN_CPYTHON
                          __pyx_t_13 = PyTuple_GET_ITEM(__pyx_t_1, __pyx_t_9); __Pyx_INCREF(__pyx_t_13); __pyx_t_9++; if (unlikely(0 < 0)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 299; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
                          #else
                          __pyx_t_13 = PySequence_ITEM(__pyx_t_1, __pyx_t_9); __pyx_t_9++; if (unlikely(!__pyx_t_13)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 299; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
                          __Pyx_GOTREF(__pyx_t_13);
                          #endif
                        }
                      } else {
                        __pyx_t_13 = __pyx_t_10(__pyx_t_1);
                        if (unlikely(!__pyx_t_13)) {
                          PyObject* exc_type = PyErr_Occurred();
                          if (exc_type) {
                            if (likely(exc_type == PyExc_StopIteration || PyErr_GivenExceptionMatches(exc_type, PyExc_StopIteration))) PyErr_Clear();
                            else {__pyx_filename = __pyx_f[0]; __pyx_lineno = 299; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
                          }
                          break;
                        }
                        __Pyx_GOTREF(__pyx_t_13);
                      }
                      __Pyx_XDECREF_SET(__pyx_v_f, __pyx_t_13);
                      __pyx_t_13 = 0;

                      /* "kstreamc.pyx":300
 *                                     if kevt_type not in self.exclude_from_filters:
 *                                         for f in self._filters:
 *                                             if f(param):             # <<<<<<<<<<<<<<
 *                                                 self._free_buffers(info, property_buffer)
 *                                                 return
 */
                      __Pyx_INCREF(__pyx_v_f);
                      __pyx_t_8 = __pyx_v_f; __pyx_t_6 = NULL;
                      if (CYTHON_COMPILING_IN_CPYTHON && unlikely(PyMethod_Check(__pyx_t_8))) {
                        __pyx_t_6 = PyMethod_GET_SELF(__pyx_t_8);
                        if (likely(__pyx_t_6)) {
                          PyObject* function = PyMethod_GET_FUNCTION(__pyx_t_8);
                          __Pyx_INCREF(__pyx_t_6);
                          __Pyx_INCREF(function);
                          __Pyx_DECREF_SET(__pyx_t_8, function);
                        }
                      }
                      if (!__pyx_t_6) {
                        __pyx_t_13 = __Pyx_PyObject_CallOneArg(__pyx_t_8, __pyx_v_param); if (unlikely(!__pyx_t_13)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 300; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
                        __Pyx_GOTREF(__pyx_t_13);
                      } else {
                        __pyx_t_12 = PyTuple_New(1+1); if (unlikely(!__pyx_t_12)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 300; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
                        __Pyx_GOTREF(__pyx_t_12);
                        __Pyx_GIVEREF(__pyx_t_6); PyTuple_SET_ITEM(__pyx_t_12, 0, __pyx_t_6); __pyx_t_6 = NULL;
                        __Pyx_INCREF(__pyx_v_param);
                        __Pyx_GIVEREF(__pyx_v_param);
                        PyTuple_SET_ITEM(__pyx_t_12, 0+1, __pyx_v_param);
                        __pyx_t_13 = __Pyx_PyObject_Call(__pyx_t_8, __pyx_t_12, NULL); if (unlikely(!__pyx_t_13)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 300; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
                        __Pyx_GOTREF(__pyx_t_13);
                        __Pyx_DECREF(__pyx_t_12); __pyx_t_12 = 0;
                      }
                      __Pyx_DECREF(__pyx_t_8); __pyx_t_8 = 0;
                      __pyx_t_7 = __Pyx_PyObject_IsTrue(__pyx_t_13); if (unlikely(__pyx_t_7 < 0)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 300; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
                      __Pyx_DECREF(__pyx_t_13); __pyx_t_13 = 0;
                      if (__pyx_t_7) {

                        /* "kstreamc.pyx":301
 *                                         for f in self._filters:
 *                                             if f(param):
 *                                                 self._free_buffers(info, property_buffer)             # <<<<<<<<<<<<<<
 *                                                 return
 *                             self._aggregate_info(kevent_trace, kevt_type, params)
 */
                        __pyx_t_13 = ((struct __pyx_vtabstruct_8kstreamc_KEventStreamCollector *)__pyx_v_self->__pyx_vtab)->_free_buffers(__pyx_v_self, __pyx_v_info, __pyx_v_property_buffer); if (unlikely(!__pyx_t_13)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 301; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
                        __Pyx_GOTREF(__pyx_t_13);
                        __Pyx_DECREF(__pyx_t_13); __pyx_t_13 = 0;

                        /* "kstreamc.pyx":302
 *                                             if f(param):
 *                                                 self._free_buffers(info, property_buffer)
 *                                                 return             # <<<<<<<<<<<<<<
 *                             self._aggregate_info(kevent_trace, kevt_type, params)
 * 
 */
                        __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0;
                        goto __pyx_L7_try_return;

                        /* "kstreamc.pyx":300
 *                                     if kevt_type not in self.exclude_from_filters:
 *                                         for f in self._filters:
 *                                             if f(param):             # <<<<<<<<<<<<<<
 *                                                 self._free_buffers(info, property_buffer)
 *                                                 return
 */
                      }

                      /* "kstreamc.pyx":299
 *                                 elif len(self._filters) > 0:
 *                                     if kevt_type not in self.exclude_from_filters:
 *                                         for f in self._filters:             # <<<<<<<<<<<<<<
 *                                             if f(param):
 *                                                 self._free_buffers(info, property_buffer)
 */
                    }
                    __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0;

                    /* "kstreamc.pyx":298
 *                                     return
 *                                 elif len(self._filters) > 0:
 *                                     if kevt_type not in self.exclude_from_filters:             # <<<<<<<<<<<<<<
 *                                         for f in self._filters:
 *                                             if f(param):
 */
                  }

                  /* "kstreamc.pyx":297
 *                                     self._free_buffers(info, property_buffer)
 *                                     return
 *                                 elif len(self._filters) > 0:             # <<<<<<<<<<<<<<
 *                                     if kevt_type not in self.exclude_from_filters:
 *                                         for f in self._filters:
 */
                }

                /* "kstreamc.pyx":293
 *                             # PEP 8 compliant coding style
 *                             _property = self.property_regex.sub(r'_\1', property_name).lower()
 *                             if _property in self.exclude_pid_props:             # <<<<<<<<<<<<<<
 *                                 if self.own_pid == param:
 *                                     self._free_buffers(info, property_buffer)
 */
              }

              /* "kstreamc.pyx":303
 *                                                 self._free_buffers(info, property_buffer)
 *                                                 return
 *                             self._aggregate_info(kevent_trace, kevt_type, params)             # <<<<<<<<<<<<<<
 * 
 *                             params[_property] = param
 */
              __pyx_t_1 = ((struct __pyx_vtabstruct_8kstreamc_KEventStreamCollector *)__pyx_v_self->__pyx_vtab)->_aggregate_info(__pyx_v_self, __pyx_v_kevent_trace, __pyx_v_kevt_type, __pyx_v_params); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 303; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
              __Pyx_GOTREF(__pyx_t_1);
              __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0;

              /* "kstreamc.pyx":305
 *                             self._aggregate_info(kevent_trace, kevt_type, params)
 * 
 *                             params[_property] = param             # <<<<<<<<<<<<<<
 *                         # release property buffer memory
 *                         free(<void*> property_buffer)
 */
              if (unlikely(PyObject_SetItem(__pyx_v_params, __pyx_v__property, __pyx_v_param) < 0)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 305; __pyx_clineno = __LINE__; goto __pyx_L3_error;}

              /* "kstreamc.pyx":285
 *                         # get the property value and store
 *                         # it in the parameter dictionary
 *                         if status == ERROR_SUCCESS:             # <<<<<<<<<<<<<<
 *                             param = self._parse_property(property.nonStructType.InType,
 *                                                          property.nonStructType.OutType,
 */
            }

            /* "kstreamc.pyx":307
 *                             params[_property] = param
 *                         # release property buffer memory
 *                         free(<void*> property_buffer)             # <<<<<<<<<<<<<<
 * 
 *                     ts = self._filetime_to_systime(kevent_trace.EventHeader)
 */
            free(((void *)__pyx_v_property_buffer));
          }

          /* "kstreamc.pyx":309
 *                         free(<void*> property_buffer)
 * 
 *                     ts = self._filetime_to_systime(kevent_trace.EventHeader)             # <<<<<<<<<<<<<<
 * 
 *                     # call the kernel event callback
 */
          __pyx_t_1 = ((struct __pyx_vtabstruct_8kstreamc_KEventStreamCollector *)__pyx_v_self->__pyx_vtab)->_filetime_to_systime(__pyx_v_self, __pyx_v_kevent_trace->EventHeader); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 309; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
          __Pyx_GOTREF(__pyx_t_1);
          __pyx_v_ts = __pyx_t_1;
          __pyx_t_1 = 0;

          /* "kstreamc.pyx":314
 *                     # with the specified arguments
 *                     self.next_kevt_callback(kevt_type,
 *                                             cpuid,             # <<<<<<<<<<<<<<
 *                                             ts,
 *                                             params)
 */
          __pyx_t_13 = __Pyx_PyInt_From_UCHAR(__pyx_v_cpuid); if (unlikely(!__pyx_t_13)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 314; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
          __Pyx_GOTREF(__pyx_t_13);

          /* "kstreamc.pyx":316
 *                                             cpuid,
 *                                             ts,
 *                                             params)             # <<<<<<<<<<<<<<
 *         except Exception as e:
 *             with self.file_handler.applicationbound():
 */
          __Pyx_INCREF(__pyx_v_self->next_kevt_callback);
          __pyx_t_8 = __pyx_v_self->next_kevt_callback; __pyx_t_12 = NULL;
          __pyx_t_9 = 0;
          if (CYTHON_COMPILING_IN_CPYTHON && likely(PyMethod_Check(__pyx_t_8))) {
            __pyx_t_12 = PyMethod_GET_SELF(__pyx_t_8);
            if (likely(__pyx_t_12)) {
              PyObject* function = PyMethod_GET_FUNCTION(__pyx_t_8);
              __Pyx_INCREF(__pyx_t_12);
              __Pyx_INCREF(function);
              __Pyx_DECREF_SET(__pyx_t_8, function);
              __pyx_t_9 = 1;
            }
          }
          __pyx_t_6 = PyTuple_New(4+__pyx_t_9); if (unlikely(!__pyx_t_6)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 313; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
          __Pyx_GOTREF(__pyx_t_6);
          if (__pyx_t_12) {
            __Pyx_GIVEREF(__pyx_t_12); PyTuple_SET_ITEM(__pyx_t_6, 0, __pyx_t_12); __pyx_t_12 = NULL;
          }
          __Pyx_INCREF(__pyx_v_kevt_type);
          __Pyx_GIVEREF(__pyx_v_kevt_type);
          PyTuple_SET_ITEM(__pyx_t_6, 0+__pyx_t_9, __pyx_v_kevt_type);
          __Pyx_GIVEREF(__pyx_t_13);
          PyTuple_SET_ITEM(__pyx_t_6, 1+__pyx_t_9, __pyx_t_13);
          __Pyx_INCREF(__pyx_v_ts);
          __Pyx_GIVEREF(__pyx_v_ts);
          PyTuple_SET_ITEM(__pyx_t_6, 2+__pyx_t_9, __pyx_v_ts);
          __Pyx_INCREF(__pyx_v_params);
          __Pyx_GIVEREF(__pyx_v_params);
          PyTuple_SET_ITEM(__pyx_t_6, 3+__pyx_t_9, __pyx_v_params);
          __pyx_t_13 = 0;
          __pyx_t_1 = __Pyx_PyObject_Call(__pyx_t_8, __pyx_t_6, NULL); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 313; __pyx_clineno = __LINE__; goto __pyx_L3_error;}
          __Pyx_GOTREF(__pyx_t_1);
          __Pyx_DECREF(__pyx_t_6); __pyx_t_6 = 0;
          __Pyx_DECREF(__pyx_t_8); __pyx_t_8 = 0;
          __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0;

          /* "kstreamc.pyx":257
 *                 # `TRACE_EVENT_INFO` structure once we had
 *                 # parsed the event properties. Otherwise, memory leaks can occur
 *                 if status == ERROR_SUCCESS:             # <<<<<<<<<<<<<<
 *                     props = info.EventPropertyInfoArray
 *                     for i from 0 <= i < info.TopLevelPropertyCount:
 */
        }

        /* "kstreamc.pyx":245
 *                     dropped = False
 * 
 *             if not dropped:             # <<<<<<<<<<<<<<
 *                 if (kevent_trace.EventHeader.Flags & EVENT_HEADER_FLAG_32_BIT_HEADER) == \
 *                         EVENT_HEADER_FLAG_32_BIT_HEADER:
 */
      }

      /* "kstreamc.pyx":203
 *         cdef dropped = False
 * 
 *         try:             # <<<<<<<<<<<<<<
 *             status = TdhGetEventInformation(kevent_trace,
 *                                             0,
 */
    }
    __Pyx_XDECREF(__pyx_t_2); __pyx_t_2 = 0;
    __Pyx_XDECREF(__pyx_t_3); __pyx_t_3 = 0;
    __Pyx_XDECREF(__pyx_t_4); __pyx_t_4 = 0;
    goto __pyx_L10_try_end;
    __pyx_L3_error:;
    __Pyx_XDECREF(__pyx_t_11); __pyx_t_11 = 0;
    __Pyx_XDECREF(__pyx_t_12); __pyx_t_12 = 0;
    __Pyx_XDECREF(__pyx_t_13); __pyx_t_13 = 0;
    __Pyx_XDECREF(__pyx_t_6); __pyx_t_6 = 0;
    __Pyx_XDECREF(__pyx_t_8); __pyx_t_8 = 0;
    __Pyx_XDECREF(__pyx_t_1); __pyx_t_1 = 0;

    /* "kstreamc.pyx":317
 *                                             ts,
 *                                             params)
 *         except Exception as e:             # <<<<<<<<<<<<<<
 *             with self.file_handler.applicationbound():
 *                 self.logger.error(traceback.format_exc())
 */
    __pyx_t_16 = PyErr_ExceptionMatches(__pyx_builtin_Exception);
    if (__pyx_t_16) {
      __Pyx_AddTraceback("kstreamc.KEventStreamCollector._process_kevent", __pyx_clineno, __pyx_lineno, __pyx_filename);
      if (__Pyx_GetException(&__pyx_t_1, &__pyx_t_8, &__pyx_t_6) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 317; __pyx_clineno = __LINE__; goto __pyx_L5_except_error;}
      __Pyx_GOTREF(__pyx_t_1);
      __Pyx_GOTREF(__pyx_t_8);
      __Pyx_GOTREF(__pyx_t_6);
      __Pyx_INCREF(__pyx_t_8);
      __pyx_v_e = __pyx_t_8;

      /* "kstreamc.pyx":318
 *                                             params)
 *         except Exception as e:
 *             with self.file_handler.applicationbound():             # <<<<<<<<<<<<<<
 *                 self.logger.error(traceback.format_exc())
 *         except KeyboardInterrupt:
 */
      /*with:*/ {
        __pyx_t_12 = __Pyx_PyObject_GetAttrStr(__pyx_v_self->file_handler, __pyx_n_s_applicationbound); if (unlikely(!__pyx_t_12)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 318; __pyx_clineno = __LINE__; goto __pyx_L5_except_error;}
        __Pyx_GOTREF(__pyx_t_12);
        __pyx_t_11 = NULL;
        if (CYTHON_COMPILING_IN_CPYTHON && likely(PyMethod_Check(__pyx_t_12))) {
          __pyx_t_11 = PyMethod_GET_SELF(__pyx_t_12);
          if (likely(__pyx_t_11)) {
            PyObject* function = PyMethod_GET_FUNCTION(__pyx_t_12);
            __Pyx_INCREF(__pyx_t_11);
            __Pyx_INCREF(function);
            __Pyx_DECREF_SET(__pyx_t_12, function);
          }
        }
        if (__pyx_t_11) {
          __pyx_t_13 = __Pyx_PyObject_CallOneArg(__pyx_t_12, __pyx_t_11); if (unlikely(!__pyx_t_13)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 318; __pyx_clineno = __LINE__; goto __pyx_L5_except_error;}
          __Pyx_DECREF(__pyx_t_11); __pyx_t_11 = 0;
        } else {
          __pyx_t_13 = __Pyx_PyObject_CallNoArg(__pyx_t_12); if (unlikely(!__pyx_t_13)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 318; __pyx_clineno = __LINE__; goto __pyx_L5_except_error;}
        }
        __Pyx_GOTREF(__pyx_t_13);
        __Pyx_DECREF(__pyx_t_12); __pyx_t_12 = 0;
        __pyx_t_17 = __Pyx_PyObject_LookupSpecial(__pyx_t_13, __pyx_n_s_exit); if (unlikely(!__pyx_t_17)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 318; __pyx_clineno = __LINE__; goto __pyx_L5_except_error;}
        __Pyx_GOTREF(__pyx_t_17);
        __pyx_t_11 = __Pyx_PyObject_LookupSpecial(__pyx_t_13, __pyx_n_s_enter); if (unlikely(!__pyx_t_11)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 318; __pyx_clineno = __LINE__; goto __pyx_L40_error;}
        __Pyx_GOTREF(__pyx_t_11);
        __pyx_t_18 = NULL;
        if (CYTHON_COMPILING_IN_CPYTHON && likely(PyMethod_Check(__pyx_t_11))) {
          __pyx_t_18 = PyMethod_GET_SELF(__pyx_t_11);
          if (likely(__pyx_t_18)) {
            PyObject* function = PyMethod_GET_FUNCTION(__pyx_t_11);
            __Pyx_INCREF(__pyx_t_18);
            __Pyx_INCREF(function);
            __Pyx_DECREF_SET(__pyx_t_11, function);
          }
        }
        if (__pyx_t_18) {
          __pyx_t_12 = __Pyx_PyObject_CallOneArg(__pyx_t_11, __pyx_t_18); if (unlikely(!__pyx_t_12)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 318; __pyx_clineno = __LINE__; goto __pyx_L40_error;}
          __Pyx_DECREF(__pyx_t_18); __pyx_t_18 = 0;
        } else {
          __pyx_t_12 = __Pyx_PyObject_CallNoArg(__pyx_t_11); if (unlikely(!__pyx_t_12)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 318; __pyx_clineno = __LINE__; goto __pyx_L40_error;}
        }
        __Pyx_GOTREF(__pyx_t_12);
        __Pyx_DECREF(__pyx_t_11); __pyx_t_11 = 0;
        __Pyx_DECREF(__pyx_t_12); __pyx_t_12 = 0;
        __Pyx_DECREF(__pyx_t_13); __pyx_t_13 = 0;
        /*try:*/ {
          {
            __Pyx_ExceptionSave(&__pyx_t_19, &__pyx_t_20, &__pyx_t_21);
            __Pyx_XGOTREF(__pyx_t_19);
            __Pyx_XGOTREF(__pyx_t_20);
            __Pyx_XGOTREF(__pyx_t_21);
            /*try:*/ {

              /* "kstreamc.pyx":319
 *         except Exception as e:
 *             with self.file_handler.applicationbound():
 *                 self.logger.error(traceback.format_exc())             # <<<<<<<<<<<<<<
 *         except KeyboardInterrupt:
 *             pass
 */
              __pyx_t_12 = __Pyx_PyObject_GetAttrStr(__pyx_v_self->logger, __pyx_n_s_error); if (unlikely(!__pyx_t_12)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 319; __pyx_clineno = __LINE__; goto __pyx_L46_error;}
              __Pyx_GOTREF(__pyx_t_12);
              __pyx_t_18 = __Pyx_GetModuleGlobalName(__pyx_n_s_traceback); if (unlikely(!__pyx_t_18)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 319; __pyx_clineno = __LINE__; goto __pyx_L46_error;}
              __Pyx_GOTREF(__pyx_t_18);
              __pyx_t_22 = __Pyx_PyObject_GetAttrStr(__pyx_t_18, __pyx_n_s_format_exc); if (unlikely(!__pyx_t_22)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 319; __pyx_clineno = __LINE__; goto __pyx_L46_error;}
              __Pyx_GOTREF(__pyx_t_22);
              __Pyx_DECREF(__pyx_t_18); __pyx_t_18 = 0;
              __pyx_t_18 = NULL;
              if (CYTHON_COMPILING_IN_CPYTHON && unlikely(PyMethod_Check(__pyx_t_22))) {
                __pyx_t_18 = PyMethod_GET_SELF(__pyx_t_22);
                if (likely(__pyx_t_18)) {
                  PyObject* function = PyMethod_GET_FUNCTION(__pyx_t_22);
                  __Pyx_INCREF(__pyx_t_18);
                  __Pyx_INCREF(function);
                  __Pyx_DECREF_SET(__pyx_t_22, function);
                }
              }
              if (__pyx_t_18) {
                __pyx_t_11 = __Pyx_PyObject_CallOneArg(__pyx_t_22, __pyx_t_18); if (unlikely(!__pyx_t_11)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 319; __pyx_clineno = __LINE__; goto __pyx_L46_error;}
                __Pyx_DECREF(__pyx_t_18); __pyx_t_18 = 0;
              } else {
                __pyx_t_11 = __Pyx_PyObject_CallNoArg(__pyx_t_22); if (unlikely(!__pyx_t_11)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 319; __pyx_clineno = __LINE__; goto __pyx_L46_error;}
              }
              __Pyx_GOTREF(__pyx_t_11);
              __Pyx_DECREF(__pyx_t_22); __pyx_t_22 = 0;
              __pyx_t_22 = NULL;
              if (CYTHON_COMPILING_IN_CPYTHON && likely(PyMethod_Check(__pyx_t_12))) {
                __pyx_t_22 = PyMethod_GET_SELF(__pyx_t_12);
                if (likely(__pyx_t_22)) {
                  PyObject* function = PyMethod_GET_FUNCTION(__pyx_t_12);
                  __Pyx_INCREF(__pyx_t_22);
                  __Pyx_INCREF(function);
                  __Pyx_DECREF_SET(__pyx_t_12, function);
                }
              }
              if (!__pyx_t_22) {
                __pyx_t_13 = __Pyx_PyObject_CallOneArg(__pyx_t_12, __pyx_t_11); if (unlikely(!__pyx_t_13)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 319; __pyx_clineno = __LINE__; goto __pyx_L46_error;}
                __Pyx_DECREF(__pyx_t_11); __pyx_t_11 = 0;
                __Pyx_GOTREF(__pyx_t_13);
              } else {
                __pyx_t_18 = PyTuple_New(1+1); if (unlikely(!__pyx_t_18)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 319; __pyx_clineno = __LINE__; goto __pyx_L46_error;}
                __Pyx_GOTREF(__pyx_t_18);
                __Pyx_GIVEREF(__pyx_t_22); PyTuple_SET_ITEM(__pyx_t_18, 0, __pyx_t_22); __pyx_t_22 = NULL;
                __Pyx_GIVEREF(__pyx_t_11);
                PyTuple_SET_ITEM(__pyx_t_18, 0+1, __pyx_t_11);
                __pyx_t_11 = 0;
                __pyx_t_13 = __Pyx_PyObject_Call(__pyx_t_12, __pyx_t_18, NULL); if (unlikely(!__pyx_t_13)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 319; __pyx_clineno = __LINE__; goto __pyx_L46_error;}
                __Pyx_GOTREF(__pyx_t_13);
                __Pyx_DECREF(__pyx_t_18); __pyx_t_18 = 0;
              }
              __Pyx_DECREF(__pyx_t_12); __pyx_t_12 = 0;
              __Pyx_DECREF(__pyx_t_13); __pyx_t_13 = 0;

              /* "kstreamc.pyx":318
 *                                             params)
 *         except Exception as e:
 *             with self.file_handler.applicationbound():             # <<<<<<<<<<<<<<
 *                 self.logger.error(traceback.format_exc())
 *         except KeyboardInterrupt:
 */
            }
            __Pyx_XDECREF(__pyx_t_19); __pyx_t_19 = 0;
            __Pyx_XDECREF(__pyx_t_20); __pyx_t_20 = 0;
            __Pyx_XDECREF(__pyx_t_21); __pyx_t_21 = 0;
            goto __pyx_L53_try_end;
            __pyx_L46_error:;
            __Pyx_XDECREF(__pyx_t_22); __pyx_t_22 = 0;
            __Pyx_XDECREF(__pyx_t_11); __pyx_t_11 = 0;
            __Pyx_XDECREF(__pyx_t_18); __pyx_t_18 = 0;
            __Pyx_XDECREF(__pyx_t_12); __pyx_t_12 = 0;
            __Pyx_XDECREF(__pyx_t_13); __pyx_t_13 = 0;
            /*except:*/ {
              __Pyx_AddTraceback("kstreamc.KEventStreamCollector._process_kevent", __pyx_clineno, __pyx_lineno, __pyx_filename);
              if (__Pyx_GetException(&__pyx_t_13, &__pyx_t_12, &__pyx_t_18) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 318; __pyx_clineno = __LINE__; goto __pyx_L48_except_error;}
              __Pyx_GOTREF(__pyx_t_13);
              __Pyx_GOTREF(__pyx_t_12);
              __Pyx_GOTREF(__pyx_t_18);
              __pyx_t_11 = PyTuple_Pack(3, __pyx_t_13, __pyx_t_12, __pyx_t_18); if (unlikely(!__pyx_t_11)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 318; __pyx_clineno = __LINE__; goto __pyx_L48_except_error;}
              __Pyx_GOTREF(__pyx_t_11);
              __pyx_t_23 = __Pyx_PyObject_Call(__pyx_t_17, __pyx_t_11, NULL);
              __Pyx_DECREF(__pyx_t_17); __pyx_t_17 = 0;
              __Pyx_DECREF(__pyx_t_11); __pyx_t_11 = 0;
              if (unlikely(!__pyx_t_23)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 318; __pyx_clineno = __LINE__; goto __pyx_L48_except_error;}
              __Pyx_GOTREF(__pyx_t_23);
              __pyx_t_7 = __Pyx_PyObject_IsTrue(__pyx_t_23);
              __Pyx_DECREF(__pyx_t_23); __pyx_t_23 = 0;
              if (__pyx_t_7 < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 318; __pyx_clineno = __LINE__; goto __pyx_L48_except_error;}
              __pyx_t_5 = ((!(__pyx_t_7 != 0)) != 0);
              if (__pyx_t_5) {
                __Pyx_GIVEREF(__pyx_t_13);
                __Pyx_GIVEREF(__pyx_t_12);
                __Pyx_XGIVEREF(__pyx_t_18);
                __Pyx_ErrRestore(__pyx_t_13, __pyx_t_12, __pyx_t_18);
                __pyx_t_13 = 0; __pyx_t_12 = 0; __pyx_t_18 = 0; 
                {__pyx_filename = __pyx_f[0]; __pyx_lineno = 318; __pyx_clineno = __LINE__; goto __pyx_L48_except_error;}
              }
              __Pyx_DECREF(__pyx_t_13); __pyx_t_13 = 0;
              __Pyx_DECREF(__pyx_t_12); __pyx_t_12 = 0;
              __Pyx_DECREF(__pyx_t_18); __pyx_t_18 = 0;
              goto __pyx_L47_exception_handled;
            }
            __pyx_L48_except_error:;
            __Pyx_XGIVEREF(__pyx_t_19);
            __Pyx_XGIVEREF(__pyx_t_20);
            __Pyx_XGIVEREF(__pyx_t_21);
            __Pyx_ExceptionReset(__pyx_t_19, __pyx_t_20, __pyx_t_21);
            goto __pyx_L5_except_error;
            __pyx_L47_exception_handled:;
            __Pyx_XGIVEREF(__pyx_t_19);
            __Pyx_XGIVEREF(__pyx_t_20);
            __Pyx_XGIVEREF(__pyx_t_21);
            __Pyx_ExceptionReset(__pyx_t_19, __pyx_t_20, __pyx_t_21);
            __pyx_L53_try_end:;
          }
        }
        /*finally:*/ {
          /*normal exit:*/{
            if (__pyx_t_17) {
              __pyx_t_21 = __Pyx_PyObject_Call(__pyx_t_17, __pyx_tuple__6, NULL);
              __Pyx_DECREF(__pyx_t_17); __pyx_t_17 = 0;
              if (unlikely(!__pyx_t_21)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 318; __pyx_clineno = __LINE__; goto __pyx_L5_except_error;}
              __Pyx_GOTREF(__pyx_t_21);
              __Pyx_DECREF(__pyx_t_21); __pyx_t_21 = 0;
            }
            goto __pyx_L45;
          }
          __pyx_L45:;
        }
        goto __pyx_L57;
        __pyx_L40_error:;
        __Pyx_DECREF(__pyx_t_17); __pyx_t_17 = 0;
        goto __pyx_L5_except_error;
        __pyx_L57:;
      }
      __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0;
      __Pyx_DECREF(__pyx_t_8); __pyx_t_8 = 0;
      __Pyx_DECREF(__pyx_t_6); __pyx_t_6 = 0;
      goto __pyx_L4_exception_handled;
    }

    /* "kstreamc.pyx":320
 *             with self.file_handler.applicationbound():
 *                 self.logger.error(traceback.format_exc())
 *         except KeyboardInterrupt:             # <<<<<<<<<<<<<<
 *             pass
 *         # claim the allocated memory
 */
    __pyx_t_16 = PyErr_ExceptionMatches(__pyx_builtin_KeyboardInterrupt);
    if (__pyx_t_16) {
      PyErr_Restore(0,0,0);
      goto __pyx_L4_exception_handled;
    }
    goto __pyx_L5_except_error;
    __pyx_L5_except_error:;

    /* "kstreamc.pyx":203
 *         cdef dropped = False
 * 
 *         try:             # <<<<<<<<<<<<<<
 *             status = TdhGetEventInformation(kevent_trace,
 *                                             0,
 */
    __Pyx_XGIVEREF(__pyx_t_2);
    __Pyx_XGIVEREF(__pyx_t_3);
    __Pyx_XGIVEREF(__pyx_t_4);
    __Pyx_ExceptionReset(__pyx_t_2, __pyx_t_3, __pyx_t_4);
    goto __pyx_L1_error;
    __pyx_L7_try_return:;
    __Pyx_XGIVEREF(__pyx_t_2);
    __Pyx_XGIVEREF(__pyx_t_3);
    __Pyx_XGIVEREF(__pyx_t_4);
    __Pyx_ExceptionReset(__pyx_t_2, __pyx_t_3, __pyx_t_4);
    goto __pyx_L0;
    __pyx_L4_exception_handled:;
    __Pyx_XGIVEREF(__pyx_t_2);
    __Pyx_XGIVEREF(__pyx_t_3);
    __Pyx_XGIVEREF(__pyx_t_4);
    __Pyx_ExceptionReset(__pyx_t_2, __pyx_t_3, __pyx_t_4);
    __pyx_L10_try_end:;
  }

  /* "kstreamc.pyx":323
 *             pass
 *         # claim the allocated memory
 *         free(<void*> info)             # <<<<<<<<<<<<<<
 *         # check for pending signals.
 *         # The default behaviour is to
 */
  free(((void *)__pyx_v_info));

  /* "kstreamc.pyx":328
 *         # raise `KeyboardInterrupt` exception
 *         # which will be propagated to the caller
 *         if PyErr_CheckSignals() > 0:             # <<<<<<<<<<<<<<
 *             self.interrupted = True
 *             self.close_kstream()
 */
  __pyx_t_16 = PyErr_CheckSignals(); if (unlikely(__pyx_t_16 == -1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 328; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __pyx_t_5 = ((__pyx_t_16 > 0) != 0);
  if (__pyx_t_5) {

    /* "kstreamc.pyx":329
 *         # which will be propagated to the caller
 *         if PyErr_CheckSignals() > 0:
 *             self.interrupted = True             # <<<<<<<<<<<<<<
 *             self.close_kstream()
 *             return
 */
    __Pyx_INCREF(Py_True);
    __Pyx_GIVEREF(Py_True);
    __Pyx_GOTREF(__pyx_v_self->interrupted);
    __Pyx_DECREF(__pyx_v_self->interrupted);
    __pyx_v_self->interrupted = Py_True;

    /* "kstreamc.pyx":330
 *         if PyErr_CheckSignals() > 0:
 *             self.interrupted = True
 *             self.close_kstream()             # <<<<<<<<<<<<<<
 *             return
 * 
 */
    __pyx_t_8 = __Pyx_PyObject_GetAttrStr(((PyObject *)__pyx_v_self), __pyx_n_s_close_kstream); if (unlikely(!__pyx_t_8)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 330; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    __Pyx_GOTREF(__pyx_t_8);
    __pyx_t_1 = NULL;
    if (CYTHON_COMPILING_IN_CPYTHON && likely(PyMethod_Check(__pyx_t_8))) {
      __pyx_t_1 = PyMethod_GET_SELF(__pyx_t_8);
      if (likely(__pyx_t_1)) {
        PyObject* function = PyMethod_GET_FUNCTION(__pyx_t_8);
        __Pyx_INCREF(__pyx_t_1);
        __Pyx_INCREF(function);
        __Pyx_DECREF_SET(__pyx_t_8, function);
      }
    }
    if (__pyx_t_1) {
      __pyx_t_6 = __Pyx_PyObject_CallOneArg(__pyx_t_8, __pyx_t_1); if (unlikely(!__pyx_t_6)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 330; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
      __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0;
    } else {
      __pyx_t_6 = __Pyx_PyObject_CallNoArg(__pyx_t_8); if (unlikely(!__pyx_t_6)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 330; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    }
    __Pyx_GOTREF(__pyx_t_6);
    __Pyx_DECREF(__pyx_t_8); __pyx_t_8 = 0;
    __Pyx_DECREF(__pyx_t_6); __pyx_t_6 = 0;

    /* "kstreamc.pyx":331
 *             self.interrupted = True
 *             self.close_kstream()
 *             return             # <<<<<<<<<<<<<<
 * 
 *     cdef _free_buffers(self, TRACE_EVENT_INFO* info_buffer, BYTE* property_buffer):
 */
    goto __pyx_L0;

    /* "kstreamc.pyx":328
 *         # raise `KeyboardInterrupt` exception
 *         # which will be propagated to the caller
 *         if PyErr_CheckSignals() > 0:             # <<<<<<<<<<<<<<
 *             self.interrupted = True
 *             self.close_kstream()
 */
  }

  /* "kstreamc.pyx":185
 *             cself._process_kevent(kevent_trace)
 * 
 *     cdef void _process_kevent(self, EVENT_RECORD* kevent_trace) except *:             # <<<<<<<<<<<<<<
 *         """Kernel event stream callback.
 * 
 */

  /* function exit code */
  goto __pyx_L0;
  __pyx_L1_error:;
  __Pyx_XDECREF(__pyx_t_1);
  __Pyx_XDECREF(__pyx_t_6);
  __Pyx_XDECREF(__pyx_t_8);
  __Pyx_XDECREF(__pyx_t_11);
  __Pyx_XDECREF(__pyx_t_12);
  __Pyx_XDECREF(__pyx_t_13);
  __Pyx_XDECREF(__pyx_t_18);
  __Pyx_XDECREF(__pyx_t_22);
  __Pyx_AddTraceback("kstreamc.KEventStreamCollector._process_kevent", __pyx_clineno, __pyx_lineno, __pyx_filename);
  __pyx_L0:;
  __Pyx_XDECREF(__pyx_v_params);
  __Pyx_XDECREF(__pyx_v_dropped);
  __Pyx_XDECREF(__pyx_v_kevt_type);
  __Pyx_XDECREF(__pyx_v_f);
  __Pyx_XDECREF(__pyx_v_param);
  __Pyx_XDECREF(__pyx_v__property);
  __Pyx_XDECREF(__pyx_v_ts);
  __Pyx_XDECREF(__pyx_v_e);
  __Pyx_RefNannyFinishContext();
}

/* "kstreamc.pyx":333
 *             return
 * 
 *     cdef _free_buffers(self, TRACE_EVENT_INFO* info_buffer, BYTE* property_buffer):             # <<<<<<<<<<<<<<
 *         free(property_buffer)
 *         free(info_buffer)
 */

static PyObject *__pyx_f_8kstreamc_21KEventStreamCollector__free_buffers(CYTHON_UNUSED struct __pyx_obj_8kstreamc_KEventStreamCollector *__pyx_v_self, TRACE_EVENT_INFO *__pyx_v_info_buffer, BYTE *__pyx_v_property_buffer) {
  PyObject *__pyx_r = NULL;
  __Pyx_RefNannyDeclarations
  __Pyx_RefNannySetupContext("_free_buffers", 0);

  /* "kstreamc.pyx":334
 * 
 *     cdef _free_buffers(self, TRACE_EVENT_INFO* info_buffer, BYTE* property_buffer):
 *         free(property_buffer)             # <<<<<<<<<<<<<<
 *         free(info_buffer)
 * 
 */
  free(__pyx_v_property_buffer);

  /* "kstreamc.pyx":335
 *     cdef _free_buffers(self, TRACE_EVENT_INFO* info_buffer, BYTE* property_buffer):
 *         free(property_buffer)
 *         free(info_buffer)             # <<<<<<<<<<<<<<
 * 
 *     cdef _parse_property(self, USHORT in_type, USHORT out_type, BYTE* buf):
 */
  free(__pyx_v_info_buffer);

  /* "kstreamc.pyx":333
 *             return
 * 
 *     cdef _free_buffers(self, TRACE_EVENT_INFO* info_buffer, BYTE* property_buffer):             # <<<<<<<<<<<<<<
 *         free(property_buffer)
 *         free(info_buffer)
 */

  /* function exit code */
  __pyx_r = Py_None; __Pyx_INCREF(Py_None);
  __Pyx_XGIVEREF(__pyx_r);
  __Pyx_RefNannyFinishContext();
  return __pyx_r;
}

/* "kstreamc.pyx":337
 *         free(info_buffer)
 * 
 *     cdef _parse_property(self, USHORT in_type, USHORT out_type, BYTE* buf):             # <<<<<<<<<<<<<<
 *         """Parses the property value.
 * 
 */

static PyObject *__pyx_f_8kstreamc_21KEventStreamCollector__parse_property(struct __pyx_obj_8kstreamc_KEventStreamCollector *__pyx_v_self, USHORT __pyx_v_in_type, USHORT __pyx_v_out_type, BYTE *__pyx_v_buf) {
  PyObject *__pyx_v_ip = NULL;
  PyObject *__pyx_r = NULL;
  __Pyx_RefNannyDeclarations
  int __pyx_t_1;
  PyObject *__pyx_t_2 = NULL;
  PyObject *__pyx_t_3 = NULL;
  PyObject *__pyx_t_4 = NULL;
  PyObject *__pyx_t_5 = NULL;
  PyObject *__pyx_t_6 = NULL;
  int __pyx_t_7;
  PyObject *__pyx_t_8 = NULL;
  LPSTR __pyx_t_9;
  PyObject *__pyx_t_10 = NULL;
  PyObject *__pyx_t_11 = NULL;
  Py_ssize_t __pyx_t_12;
  PyObject *__pyx_t_13 = NULL;
  int __pyx_lineno = 0;
  const char *__pyx_filename = NULL;
  int __pyx_clineno = 0;
  __Pyx_RefNannySetupContext("_parse_property", 0);

  /* "kstreamc.pyx":355
 * 
 *         """
 *         if buf == NULL:             # <<<<<<<<<<<<<<
 *             return None
 * 
 */
  __pyx_t_1 = ((__pyx_v_buf == NULL) != 0);
  if (__pyx_t_1) {

    /* "kstreamc.pyx":356
 *         """
 *         if buf == NULL:
 *             return None             # <<<<<<<<<<<<<<
 * 
 *         if in_type == TDH_INTYPE_UNICODESTRING:
 */
    __Pyx_XDECREF(__pyx_r);
    __Pyx_INCREF(Py_None);
    __pyx_r = Py_None;
    goto __pyx_L0;

    /* "kstreamc.pyx":355
 * 
 *         """
 *         if buf == NULL:             # <<<<<<<<<<<<<<
 *             return None
 * 
 */
  }

  /* "kstreamc.pyx":358
 *             return None
 * 
 *         if in_type == TDH_INTYPE_UNICODESTRING:             # <<<<<<<<<<<<<<
 *             try:
 *                 return bytes(<LPTSTR>buf, 'utf-8').decode('utf-8')
 */
  switch (__pyx_v_in_type) {
    case TDH_INTYPE_UNICODESTRING:

    /* "kstreamc.pyx":359
 * 
 *         if in_type == TDH_INTYPE_UNICODESTRING:
 *             try:             # <<<<<<<<<<<<<<
 *                 return bytes(<LPTSTR>buf, 'utf-8').decode('utf-8')
 *             except UnicodeDecodeError:
 */
    {
      __Pyx_ExceptionSave(&__pyx_t_2, &__pyx_t_3, &__pyx_t_4);
      __Pyx_XGOTREF(__pyx_t_2);
      __Pyx_XGOTREF(__pyx_t_3);
      __Pyx_XGOTREF(__pyx_t_4);
      /*try:*/ {

        /* "kstreamc.pyx":360
 *         if in_type == TDH_INTYPE_UNICODESTRING:
 *             try:
 *                 return bytes(<LPTSTR>buf, 'utf-8').decode('utf-8')             # <<<<<<<<<<<<<<
 *             except UnicodeDecodeError:
 *                 return ''
 */
        __Pyx_XDECREF(__pyx_r);
        __pyx_t_5 = __Pyx_PyUnicode_FromUnicode(((LPTSTR)__pyx_v_buf)); if (unlikely(!__pyx_t_5)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 360; __pyx_clineno = __LINE__; goto __pyx_L4_error;}
        __Pyx_GOTREF(__pyx_t_5);
        __pyx_t_6 = PyTuple_New(2); if (unlikely(!__pyx_t_6)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 360; __pyx_clineno = __LINE__; goto __pyx_L4_error;}
        __Pyx_GOTREF(__pyx_t_6);
        __Pyx_GIVEREF(__pyx_t_5);
        PyTuple_SET_ITEM(__pyx_t_6, 0, __pyx_t_5);
        __Pyx_INCREF(__pyx_kp_s_utf_8);
        __Pyx_GIVEREF(__pyx_kp_s_utf_8);
        PyTuple_SET_ITEM(__pyx_t_6, 1, __pyx_kp_s_utf_8);
        __pyx_t_5 = 0;
        __pyx_t_5 = __Pyx_PyObject_Call(((PyObject *)(&PyBytes_Type)), __pyx_t_6, NULL); if (unlikely(!__pyx_t_5)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 360; __pyx_clineno = __LINE__; goto __pyx_L4_error;}
        __Pyx_GOTREF(__pyx_t_5);
        __Pyx_DECREF(__pyx_t_6); __pyx_t_6 = 0;
        __pyx_t_6 = __Pyx_decode_bytes(__pyx_t_5, 0, PY_SSIZE_T_MAX, NULL, NULL, PyUnicode_DecodeUTF8); if (unlikely(!__pyx_t_6)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 360; __pyx_clineno = __LINE__; goto __pyx_L4_error;}
        __Pyx_GOTREF(__pyx_t_6);
        __Pyx_DECREF(__pyx_t_5); __pyx_t_5 = 0;
        __pyx_r = __pyx_t_6;
        __pyx_t_6 = 0;
        goto __pyx_L8_try_return;

        /* "kstreamc.pyx":359
 * 
 *         if in_type == TDH_INTYPE_UNICODESTRING:
 *             try:             # <<<<<<<<<<<<<<
 *                 return bytes(<LPTSTR>buf, 'utf-8').decode('utf-8')
 *             except UnicodeDecodeError:
 */
      }
      __pyx_L4_error:;
      __Pyx_XDECREF(__pyx_t_5); __pyx_t_5 = 0;
      __Pyx_XDECREF(__pyx_t_6); __pyx_t_6 = 0;

      /* "kstreamc.pyx":361
 *             try:
 *                 return bytes(<LPTSTR>buf, 'utf-8').decode('utf-8')
 *             except UnicodeDecodeError:             # <<<<<<<<<<<<<<
 *                 return ''
 *         elif in_type == TDH_INTYPE_ANSISTRING:
 */
      __pyx_t_7 = PyErr_ExceptionMatches(__pyx_builtin_UnicodeDecodeError);
      if (__pyx_t_7) {
        __Pyx_AddTraceback("kstreamc.KEventStreamCollector._parse_property", __pyx_clineno, __pyx_lineno, __pyx_filename);
        if (__Pyx_GetException(&__pyx_t_6, &__pyx_t_5, &__pyx_t_8) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 361; __pyx_clineno = __LINE__; goto __pyx_L6_except_error;}
        __Pyx_GOTREF(__pyx_t_6);
        __Pyx_GOTREF(__pyx_t_5);
        __Pyx_GOTREF(__pyx_t_8);

        /* "kstreamc.pyx":362
 *                 return bytes(<LPTSTR>buf, 'utf-8').decode('utf-8')
 *             except UnicodeDecodeError:
 *                 return ''             # <<<<<<<<<<<<<<
 *         elif in_type == TDH_INTYPE_ANSISTRING:
 *             try:
 */
        __Pyx_XDECREF(__pyx_r);
        __Pyx_INCREF(__pyx_kp_s__7);
        __pyx_r = __pyx_kp_s__7;
        __Pyx_DECREF(__pyx_t_5); __pyx_t_5 = 0;
        __Pyx_DECREF(__pyx_t_6); __pyx_t_6 = 0;
        __Pyx_DECREF(__pyx_t_8); __pyx_t_8 = 0;
        goto __pyx_L7_except_return;
      }
      goto __pyx_L6_except_error;
      __pyx_L6_except_error:;

      /* "kstreamc.pyx":359
 * 
 *         if in_type == TDH_INTYPE_UNICODESTRING:
 *             try:             # <<<<<<<<<<<<<<
 *                 return bytes(<LPTSTR>buf, 'utf-8').decode('utf-8')
 *             except UnicodeDecodeError:
 */
      __Pyx_XGIVEREF(__pyx_t_2);
      __Pyx_XGIVEREF(__pyx_t_3);
      __Pyx_XGIVEREF(__pyx_t_4);
      __Pyx_ExceptionReset(__pyx_t_2, __pyx_t_3, __pyx_t_4);
      goto __pyx_L1_error;
      __pyx_L8_try_return:;
      __Pyx_XGIVEREF(__pyx_t_2);
      __Pyx_XGIVEREF(__pyx_t_3);
      __Pyx_XGIVEREF(__pyx_t_4);
      __Pyx_ExceptionReset(__pyx_t_2, __pyx_t_3, __pyx_t_4);
      goto __pyx_L0;
      __pyx_L7_except_return:;
      __Pyx_XGIVEREF(__pyx_t_2);
      __Pyx_XGIVEREF(__pyx_t_3);
      __Pyx_XGIVEREF(__pyx_t_4);
      __Pyx_ExceptionReset(__pyx_t_2, __pyx_t_3, __pyx_t_4);
      goto __pyx_L0;
    }

    /* "kstreamc.pyx":358
 *             return None
 * 
 *         if in_type == TDH_INTYPE_UNICODESTRING:             # <<<<<<<<<<<<<<
 *             try:
 *                 return bytes(<LPTSTR>buf, 'utf-8').decode('utf-8')
 */
    break;

    /* "kstreamc.pyx":363
 *             except UnicodeDecodeError:
 *                 return ''
 *         elif in_type == TDH_INTYPE_ANSISTRING:             # <<<<<<<<<<<<<<
 *             try:
 *                 return (<LPSTR>buf).decode('utf-8')
 */
    case TDH_INTYPE_ANSISTRING:

    /* "kstreamc.pyx":364
 *                 return ''
 *         elif in_type == TDH_INTYPE_ANSISTRING:
 *             try:             # <<<<<<<<<<<<<<
 *                 return (<LPSTR>buf).decode('utf-8')
 *             except UnicodeDecodeError:
 */
    {
      __Pyx_ExceptionSave(&__pyx_t_4, &__pyx_t_3, &__pyx_t_2);
      __Pyx_XGOTREF(__pyx_t_4);
      __Pyx_XGOTREF(__pyx_t_3);
      __Pyx_XGOTREF(__pyx_t_2);
      /*try:*/ {

        /* "kstreamc.pyx":365
 *         elif in_type == TDH_INTYPE_ANSISTRING:
 *             try:
 *                 return (<LPSTR>buf).decode('utf-8')             # <<<<<<<<<<<<<<
 *             except UnicodeDecodeError:
 *                 return ''
 */
        __Pyx_XDECREF(__pyx_r);
        __pyx_t_9 = ((LPSTR)__pyx_v_buf);
        __pyx_t_8 = __Pyx_decode_c_string(__pyx_t_9, 0, strlen(__pyx_t_9), NULL, NULL, PyUnicode_DecodeUTF8); if (unlikely(!__pyx_t_8)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 365; __pyx_clineno = __LINE__; goto __pyx_L14_error;}
        __Pyx_GOTREF(__pyx_t_8);
        __Pyx_INCREF(__pyx_t_8);
        __pyx_r = __pyx_t_8;
        __Pyx_DECREF(__pyx_t_8); __pyx_t_8 = 0;
        goto __pyx_L18_try_return;

        /* "kstreamc.pyx":364
 *                 return ''
 *         elif in_type == TDH_INTYPE_ANSISTRING:
 *             try:             # <<<<<<<<<<<<<<
 *                 return (<LPSTR>buf).decode('utf-8')
 *             except UnicodeDecodeError:
 */
      }
      __pyx_L14_error:;
      __Pyx_XDECREF(__pyx_t_6); __pyx_t_6 = 0;
      __Pyx_XDECREF(__pyx_t_5); __pyx_t_5 = 0;
      __Pyx_XDECREF(__pyx_t_8); __pyx_t_8 = 0;

      /* "kstreamc.pyx":366
 *             try:
 *                 return (<LPSTR>buf).decode('utf-8')
 *             except UnicodeDecodeError:             # <<<<<<<<<<<<<<
 *                 return ''
 *         elif in_type == TDH_INTYPE_INT8:
 */
      __pyx_t_7 = PyErr_ExceptionMatches(__pyx_builtin_UnicodeDecodeError);
      if (__pyx_t_7) {
        __Pyx_AddTraceback("kstreamc.KEventStreamCollector._parse_property", __pyx_clineno, __pyx_lineno, __pyx_filename);
        if (__Pyx_GetException(&__pyx_t_8, &__pyx_t_5, &__pyx_t_6) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 366; __pyx_clineno = __LINE__; goto __pyx_L16_except_error;}
        __Pyx_GOTREF(__pyx_t_8);
        __Pyx_GOTREF(__pyx_t_5);
        __Pyx_GOTREF(__pyx_t_6);

        /* "kstreamc.pyx":367
 *                 return (<LPSTR>buf).decode('utf-8')
 *             except UnicodeDecodeError:
 *                 return ''             # <<<<<<<<<<<<<<
 *         elif in_type == TDH_INTYPE_INT8:
 *             return (<CHAR*>buf)[0]
 */
        __Pyx_XDECREF(__pyx_r);
        __Pyx_INCREF(__pyx_kp_s__7);
        __pyx_r = __pyx_kp_s__7;
        __Pyx_DECREF(__pyx_t_5); __pyx_t_5 = 0;
        __Pyx_DECREF(__pyx_t_6); __pyx_t_6 = 0;
        __Pyx_DECREF(__pyx_t_8); __pyx_t_8 = 0;
        goto __pyx_L17_except_return;
      }
      goto __pyx_L16_except_error;
      __pyx_L16_except_error:;

      /* "kstreamc.pyx":364
 *                 return ''
 *         elif in_type == TDH_INTYPE_ANSISTRING:
 *             try:             # <<<<<<<<<<<<<<
 *                 return (<LPSTR>buf).decode('utf-8')
 *             except UnicodeDecodeError:
 */
      __Pyx_XGIVEREF(__pyx_t_4);
      __Pyx_XGIVEREF(__pyx_t_3);
      __Pyx_XGIVEREF(__pyx_t_2);
      __Pyx_ExceptionReset(__pyx_t_4, __pyx_t_3, __pyx_t_2);
      goto __pyx_L1_error;
      __pyx_L18_try_return:;
      __Pyx_XGIVEREF(__pyx_t_4);
      __Pyx_XGIVEREF(__pyx_t_3);
      __Pyx_XGIVEREF(__pyx_t_2);
      __Pyx_ExceptionReset(__pyx_t_4, __pyx_t_3, __pyx_t_2);
      goto __pyx_L0;
      __pyx_L17_except_return:;
      __Pyx_XGIVEREF(__pyx_t_4);
      __Pyx_XGIVEREF(__pyx_t_3);
      __Pyx_XGIVEREF(__pyx_t_2);
      __Pyx_ExceptionReset(__pyx_t_4, __pyx_t_3, __pyx_t_2);
      goto __pyx_L0;
    }

    /* "kstreamc.pyx":363
 *             except UnicodeDecodeError:
 *                 return ''
 *         elif in_type == TDH_INTYPE_ANSISTRING:             # <<<<<<<<<<<<<<
 *             try:
 *                 return (<LPSTR>buf).decode('utf-8')
 */
    break;

    /* "kstreamc.pyx":368
 *             except UnicodeDecodeError:
 *                 return ''
 *         elif in_type == TDH_INTYPE_INT8:             # <<<<<<<<<<<<<<
 *             return (<CHAR*>buf)[0]
 * 
 */
    case TDH_INTYPE_INT8:

    /* "kstreamc.pyx":369
 *                 return ''
 *         elif in_type == TDH_INTYPE_INT8:
 *             return (<CHAR*>buf)[0]             # <<<<<<<<<<<<<<
 * 
 *         elif in_type == TDH_INTYPE_UINT8:
 */
    __Pyx_XDECREF(__pyx_r);
    __pyx_t_6 = __Pyx_PyInt_From_CHAR((((CHAR *)__pyx_v_buf)[0])); if (unlikely(!__pyx_t_6)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 369; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    __Pyx_GOTREF(__pyx_t_6);
    __pyx_r = __pyx_t_6;
    __pyx_t_6 = 0;
    goto __pyx_L0;

    /* "kstreamc.pyx":368
 *             except UnicodeDecodeError:
 *                 return ''
 *         elif in_type == TDH_INTYPE_INT8:             # <<<<<<<<<<<<<<
 *             return (<CHAR*>buf)[0]
 * 
 */
    break;

    /* "kstreamc.pyx":371
 *             return (<CHAR*>buf)[0]
 * 
 *         elif in_type == TDH_INTYPE_UINT8:             # <<<<<<<<<<<<<<
 *             if out_type == TDH_OUTTYPE_HEXINT8:
 *                 return hex((<BYTE*>buf)[0])
 */
    case TDH_INTYPE_UINT8:

    /* "kstreamc.pyx":372
 * 
 *         elif in_type == TDH_INTYPE_UINT8:
 *             if out_type == TDH_OUTTYPE_HEXINT8:             # <<<<<<<<<<<<<<
 *                 return hex((<BYTE*>buf)[0])
 *             else:
 */
    __pyx_t_1 = ((__pyx_v_out_type == TDH_OUTTYPE_HEXINT8) != 0);
    if (__pyx_t_1) {

      /* "kstreamc.pyx":373
 *         elif in_type == TDH_INTYPE_UINT8:
 *             if out_type == TDH_OUTTYPE_HEXINT8:
 *                 return hex((<BYTE*>buf)[0])             # <<<<<<<<<<<<<<
 *             else:
 *                 return (<BYTE*>buf)[0]
 */
      __Pyx_XDECREF(__pyx_r);
      __pyx_t_6 = __Pyx_PyInt_From_BYTE((((BYTE *)__pyx_v_buf)[0])); if (unlikely(!__pyx_t_6)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 373; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
      __Pyx_GOTREF(__pyx_t_6);
      __pyx_t_5 = PyTuple_New(1); if (unlikely(!__pyx_t_5)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 373; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
      __Pyx_GOTREF(__pyx_t_5);
      __Pyx_GIVEREF(__pyx_t_6);
      PyTuple_SET_ITEM(__pyx_t_5, 0, __pyx_t_6);
      __pyx_t_6 = 0;
      __pyx_t_6 = __Pyx_PyObject_Call(__pyx_builtin_hex, __pyx_t_5, NULL); if (unlikely(!__pyx_t_6)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 373; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
      __Pyx_GOTREF(__pyx_t_6);
      __Pyx_DECREF(__pyx_t_5); __pyx_t_5 = 0;
      __pyx_r = __pyx_t_6;
      __pyx_t_6 = 0;
      goto __pyx_L0;

      /* "kstreamc.pyx":372
 * 
 *         elif in_type == TDH_INTYPE_UINT8:
 *             if out_type == TDH_OUTTYPE_HEXINT8:             # <<<<<<<<<<<<<<
 *                 return hex((<BYTE*>buf)[0])
 *             else:
 */
    }

    /* "kstreamc.pyx":375
 *                 return hex((<BYTE*>buf)[0])
 *             else:
 *                 return (<BYTE*>buf)[0]             # <<<<<<<<<<<<<<
 * 
 *         elif in_type == TDH_INTYPE_POINTER or in_type == TDH_INTYPE_SIZET:
 */
    /*else*/ {
      __Pyx_XDECREF(__pyx_r);
      __pyx_t_6 = __Pyx_PyInt_From_BYTE((((BYTE *)__pyx_v_buf)[0])); if (unlikely(!__pyx_t_6)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 375; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
      __Pyx_GOTREF(__pyx_t_6);
      __pyx_r = __pyx_t_6;
      __pyx_t_6 = 0;
      goto __pyx_L0;
    }

    /* "kstreamc.pyx":371
 *             return (<CHAR*>buf)[0]
 * 
 *         elif in_type == TDH_INTYPE_UINT8:             # <<<<<<<<<<<<<<
 *             if out_type == TDH_OUTTYPE_HEXINT8:
 *                 return hex((<BYTE*>buf)[0])
 */
    break;

    /* "kstreamc.pyx":377
 *                 return (<BYTE*>buf)[0]
 * 
 *         elif in_type == TDH_INTYPE_POINTER or in_type == TDH_INTYPE_SIZET:             # <<<<<<<<<<<<<<
 *             if self.pointer_size == 8:
 *                 return (<ULONGLONG*>buf)[0]
 */
    case TDH_INTYPE_POINTER:
    case TDH_INTYPE_SIZET:

    /* "kstreamc.pyx":378
 * 
 *         elif in_type == TDH_INTYPE_POINTER or in_type == TDH_INTYPE_SIZET:
 *             if self.pointer_size == 8:             # <<<<<<<<<<<<<<
 *                 return (<ULONGLONG*>buf)[0]
 *             else:
 */
    __pyx_t_6 = __Pyx_PyInt_EqObjC(__pyx_v_self->pointer_size, __pyx_int_8, 8, 0); if (unlikely(!__pyx_t_6)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 378; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    __Pyx_GOTREF(__pyx_t_6);
    __pyx_t_1 = __Pyx_PyObject_IsTrue(__pyx_t_6); if (unlikely(__pyx_t_1 < 0)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 378; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    __Pyx_DECREF(__pyx_t_6); __pyx_t_6 = 0;
    if (__pyx_t_1) {

      /* "kstreamc.pyx":379
 *         elif in_type == TDH_INTYPE_POINTER or in_type == TDH_INTYPE_SIZET:
 *             if self.pointer_size == 8:
 *                 return (<ULONGLONG*>buf)[0]             # <<<<<<<<<<<<<<
 *             else:
 *                 return (<ULONG*>buf)[0]
 */
      __Pyx_XDECREF(__pyx_r);
      __pyx_t_6 = __Pyx_PyInt_From_ULONGLONG((((ULONGLONG *)__pyx_v_buf)[0])); if (unlikely(!__pyx_t_6)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 379; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
      __Pyx_GOTREF(__pyx_t_6);
      __pyx_r = __pyx_t_6;
      __pyx_t_6 = 0;
      goto __pyx_L0;

      /* "kstreamc.pyx":378
 * 
 *         elif in_type == TDH_INTYPE_POINTER or in_type == TDH_INTYPE_SIZET:
 *             if self.pointer_size == 8:             # <<<<<<<<<<<<<<
 *                 return (<ULONGLONG*>buf)[0]
 *             else:
 */
    }

    /* "kstreamc.pyx":381
 *                 return (<ULONGLONG*>buf)[0]
 *             else:
 *                 return (<ULONG*>buf)[0]             # <<<<<<<<<<<<<<
 *         elif in_type == TDH_INTYPE_INT16:
 *             return (<SHORT*>buf)[0]
 */
    /*else*/ {
      __Pyx_XDECREF(__pyx_r);
      __pyx_t_6 = __Pyx_PyInt_From_ULONG((((ULONG *)__pyx_v_buf)[0])); if (unlikely(!__pyx_t_6)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 381; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
      __Pyx_GOTREF(__pyx_t_6);
      __pyx_r = __pyx_t_6;
      __pyx_t_6 = 0;
      goto __pyx_L0;
    }

    /* "kstreamc.pyx":377
 *                 return (<BYTE*>buf)[0]
 * 
 *         elif in_type == TDH_INTYPE_POINTER or in_type == TDH_INTYPE_SIZET:             # <<<<<<<<<<<<<<
 *             if self.pointer_size == 8:
 *                 return (<ULONGLONG*>buf)[0]
 */
    break;

    /* "kstreamc.pyx":382
 *             else:
 *                 return (<ULONG*>buf)[0]
 *         elif in_type == TDH_INTYPE_INT16:             # <<<<<<<<<<<<<<
 *             return (<SHORT*>buf)[0]
 * 
 */
    case TDH_INTYPE_INT16:

    /* "kstreamc.pyx":383
 *                 return (<ULONG*>buf)[0]
 *         elif in_type == TDH_INTYPE_INT16:
 *             return (<SHORT*>buf)[0]             # <<<<<<<<<<<<<<
 * 
 *         elif in_type == TDH_INTYPE_UINT16:
 */
    __Pyx_XDECREF(__pyx_r);
    __pyx_t_6 = __Pyx_PyInt_From_SHORT((((SHORT *)__pyx_v_buf)[0])); if (unlikely(!__pyx_t_6)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 383; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    __Pyx_GOTREF(__pyx_t_6);
    __pyx_r = __pyx_t_6;
    __pyx_t_6 = 0;
    goto __pyx_L0;

    /* "kstreamc.pyx":382
 *             else:
 *                 return (<ULONG*>buf)[0]
 *         elif in_type == TDH_INTYPE_INT16:             # <<<<<<<<<<<<<<
 *             return (<SHORT*>buf)[0]
 * 
 */
    break;

    /* "kstreamc.pyx":385
 *             return (<SHORT*>buf)[0]
 * 
 *         elif in_type == TDH_INTYPE_UINT16:             # <<<<<<<<<<<<<<
 *             if out_type == TDH_OUTTYPE_HEXINT16:
 *                 return hex((<USHORT*>buf)[0])
 */
    case TDH_INTYPE_UINT16:

    /* "kstreamc.pyx":386
 * 
 *         elif in_type == TDH_INTYPE_UINT16:
 *             if out_type == TDH_OUTTYPE_HEXINT16:             # <<<<<<<<<<<<<<
 *                 return hex((<USHORT*>buf)[0])
 *             elif out_type == TDH_OUTTYPE_PORT:
 */
    __pyx_t_1 = ((__pyx_v_out_type == TDH_OUTTYPE_HEXINT16) != 0);
    if (__pyx_t_1) {

      /* "kstreamc.pyx":387
 *         elif in_type == TDH_INTYPE_UINT16:
 *             if out_type == TDH_OUTTYPE_HEXINT16:
 *                 return hex((<USHORT*>buf)[0])             # <<<<<<<<<<<<<<
 *             elif out_type == TDH_OUTTYPE_PORT:
 *                 try:
 */
      __Pyx_XDECREF(__pyx_r);
      __pyx_t_6 = __Pyx_PyInt_From_USHORT((((USHORT *)__pyx_v_buf)[0])); if (unlikely(!__pyx_t_6)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 387; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
      __Pyx_GOTREF(__pyx_t_6);
      __pyx_t_5 = PyTuple_New(1); if (unlikely(!__pyx_t_5)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 387; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
      __Pyx_GOTREF(__pyx_t_5);
      __Pyx_GIVEREF(__pyx_t_6);
      PyTuple_SET_ITEM(__pyx_t_5, 0, __pyx_t_6);
      __pyx_t_6 = 0;
      __pyx_t_6 = __Pyx_PyObject_Call(__pyx_builtin_hex, __pyx_t_5, NULL); if (unlikely(!__pyx_t_6)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 387; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
      __Pyx_GOTREF(__pyx_t_6);
      __Pyx_DECREF(__pyx_t_5); __pyx_t_5 = 0;
      __pyx_r = __pyx_t_6;
      __pyx_t_6 = 0;
      goto __pyx_L0;

      /* "kstreamc.pyx":386
 * 
 *         elif in_type == TDH_INTYPE_UINT16:
 *             if out_type == TDH_OUTTYPE_HEXINT16:             # <<<<<<<<<<<<<<
 *                 return hex((<USHORT*>buf)[0])
 *             elif out_type == TDH_OUTTYPE_PORT:
 */
    }

    /* "kstreamc.pyx":388
 *             if out_type == TDH_OUTTYPE_HEXINT16:
 *                 return hex((<USHORT*>buf)[0])
 *             elif out_type == TDH_OUTTYPE_PORT:             # <<<<<<<<<<<<<<
 *                 try:
 *                     # we have to convert the integer
 */
    __pyx_t_1 = ((__pyx_v_out_type == TDH_OUTTYPE_PORT) != 0);
    if (__pyx_t_1) {

      /* "kstreamc.pyx":389
 *                 return hex((<USHORT*>buf)[0])
 *             elif out_type == TDH_OUTTYPE_PORT:
 *                 try:             # <<<<<<<<<<<<<<
 *                     # we have to convert the integer
 *                     # from network byte order to
 */
      {
        __Pyx_ExceptionSave(&__pyx_t_2, &__pyx_t_3, &__pyx_t_4);
        __Pyx_XGOTREF(__pyx_t_2);
        __Pyx_XGOTREF(__pyx_t_3);
        __Pyx_XGOTREF(__pyx_t_4);
        /*try:*/ {

          /* "kstreamc.pyx":393
 *                     # from network byte order to
 *                     # host byte order
 *                     return socket.ntohs((<USHORT *>buf)[0])             # <<<<<<<<<<<<<<
 *                 except TypeError:
 *                     return '0'
 */
          __Pyx_XDECREF(__pyx_r);
          __pyx_t_5 = __Pyx_GetModuleGlobalName(__pyx_n_s_socket); if (unlikely(!__pyx_t_5)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 393; __pyx_clineno = __LINE__; goto __pyx_L27_error;}
          __Pyx_GOTREF(__pyx_t_5);
          __pyx_t_8 = __Pyx_PyObject_GetAttrStr(__pyx_t_5, __pyx_n_s_ntohs); if (unlikely(!__pyx_t_8)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 393; __pyx_clineno = __LINE__; goto __pyx_L27_error;}
          __Pyx_GOTREF(__pyx_t_8);
          __Pyx_DECREF(__pyx_t_5); __pyx_t_5 = 0;
          __pyx_t_5 = __Pyx_PyInt_From_USHORT((((USHORT *)__pyx_v_buf)[0])); if (unlikely(!__pyx_t_5)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 393; __pyx_clineno = __LINE__; goto __pyx_L27_error;}
          __Pyx_GOTREF(__pyx_t_5);
          __pyx_t_10 = NULL;
          if (CYTHON_COMPILING_IN_CPYTHON && unlikely(PyMethod_Check(__pyx_t_8))) {
            __pyx_t_10 = PyMethod_GET_SELF(__pyx_t_8);
            if (likely(__pyx_t_10)) {
              PyObject* function = PyMethod_GET_FUNCTION(__pyx_t_8);
              __Pyx_INCREF(__pyx_t_10);
              __Pyx_INCREF(function);
              __Pyx_DECREF_SET(__pyx_t_8, function);
            }
          }
          if (!__pyx_t_10) {
            __pyx_t_6 = __Pyx_PyObject_CallOneArg(__pyx_t_8, __pyx_t_5); if (unlikely(!__pyx_t_6)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 393; __pyx_clineno = __LINE__; goto __pyx_L27_error;}
            __Pyx_DECREF(__pyx_t_5); __pyx_t_5 = 0;
            __Pyx_GOTREF(__pyx_t_6);
          } else {
            __pyx_t_11 = PyTuple_New(1+1); if (unlikely(!__pyx_t_11)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 393; __pyx_clineno = __LINE__; goto __pyx_L27_error;}
            __Pyx_GOTREF(__pyx_t_11);
            __Pyx_GIVEREF(__pyx_t_10); PyTuple_SET_ITEM(__pyx_t_11, 0, __pyx_t_10); __pyx_t_10 = NULL;
            __Pyx_GIVEREF(__pyx_t_5);
            PyTuple_SET_ITEM(__pyx_t_11, 0+1, __pyx_t_5);
            __pyx_t_5 = 0;
            __pyx_t_6 = __Pyx_PyObject_Call(__pyx_t_8, __pyx_t_11, NULL); if (unlikely(!__pyx_t_6)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 393; __pyx_clineno = __LINE__; goto __pyx_L27_error;}
            __Pyx_GOTREF(__pyx_t_6);
            __Pyx_DECREF(__pyx_t_11); __pyx_t_11 = 0;
          }
          __Pyx_DECREF(__pyx_t_8); __pyx_t_8 = 0;
          __pyx_r = __pyx_t_6;
          __pyx_t_6 = 0;
          goto __pyx_L31_try_return;

          /* "kstreamc.pyx":389
 *                 return hex((<USHORT*>buf)[0])
 *             elif out_type == TDH_OUTTYPE_PORT:
 *                 try:             # <<<<<<<<<<<<<<
 *                     # we have to convert the integer
 *                     # from network byte order to
 */
        }
        __pyx_L27_error:;
        __Pyx_XDECREF(__pyx_t_10); __pyx_t_10 = 0;
        __Pyx_XDECREF(__pyx_t_5); __pyx_t_5 = 0;
        __Pyx_XDECREF(__pyx_t_11); __pyx_t_11 = 0;
        __Pyx_XDECREF(__pyx_t_8); __pyx_t_8 = 0;
        __Pyx_XDECREF(__pyx_t_6); __pyx_t_6 = 0;

        /* "kstreamc.pyx":394
 *                     # host byte order
 *                     return socket.ntohs((<USHORT *>buf)[0])
 *                 except TypeError:             # <<<<<<<<<<<<<<
 *                     return '0'
 *             else:
 */
        __pyx_t_7 = PyErr_ExceptionMatches(__pyx_builtin_TypeError);
        if (__pyx_t_7) {
          __Pyx_AddTraceback("kstreamc.KEventStreamCollector._parse_property", __pyx_clineno, __pyx_lineno, __pyx_filename);
          if (__Pyx_GetException(&__pyx_t_6, &__pyx_t_8, &__pyx_t_11) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 394; __pyx_clineno = __LINE__; goto __pyx_L29_except_error;}
          __Pyx_GOTREF(__pyx_t_6);
          __Pyx_GOTREF(__pyx_t_8);
          __Pyx_GOTREF(__pyx_t_11);

          /* "kstreamc.pyx":395
 *                     return socket.ntohs((<USHORT *>buf)[0])
 *                 except TypeError:
 *                     return '0'             # <<<<<<<<<<<<<<
 *             else:
 *                 return (<USHORT*>buf)[0]
 */
          __Pyx_XDECREF(__pyx_r);
          __Pyx_INCREF(__pyx_kp_s_0);
          __pyx_r = __pyx_kp_s_0;
          __Pyx_DECREF(__pyx_t_6); __pyx_t_6 = 0;
          __Pyx_DECREF(__pyx_t_8); __pyx_t_8 = 0;
          __Pyx_DECREF(__pyx_t_11); __pyx_t_11 = 0;
          goto __pyx_L30_except_return;
        }
        goto __pyx_L29_except_error;
        __pyx_L29_except_error:;

        /* "kstreamc.pyx":389
 *                 return hex((<USHORT*>buf)[0])
 *             elif out_type == TDH_OUTTYPE_PORT:
 *                 try:             # <<<<<<<<<<<<<<
 *                     # we have to convert the integer
 *                     # from network byte order to
 */
        __Pyx_XGIVEREF(__pyx_t_2);
        __Pyx_XGIVEREF(__pyx_t_3);
        __Pyx_XGIVEREF(__pyx_t_4);
        __Pyx_ExceptionReset(__pyx_t_2, __pyx_t_3, __pyx_t_4);
        goto __pyx_L1_error;
        __pyx_L31_try_return:;
        __Pyx_XGIVEREF(__pyx_t_2);
        __Pyx_XGIVEREF(__pyx_t_3);
        __Pyx_XGIVEREF(__pyx_t_4);
        __Pyx_ExceptionReset(__pyx_t_2, __pyx_t_3, __pyx_t_4);
        goto __pyx_L0;
        __pyx_L30_except_return:;
        __Pyx_XGIVEREF(__pyx_t_2);
        __Pyx_XGIVEREF(__pyx_t_3);
        __Pyx_XGIVEREF(__pyx_t_4);
        __Pyx_ExceptionReset(__pyx_t_2, __pyx_t_3, __pyx_t_4);
        goto __pyx_L0;
      }

      /* "kstreamc.pyx":388
 *             if out_type == TDH_OUTTYPE_HEXINT16:
 *                 return hex((<USHORT*>buf)[0])
 *             elif out_type == TDH_OUTTYPE_PORT:             # <<<<<<<<<<<<<<
 *                 try:
 *                     # we have to convert the integer
 */
    }

    /* "kstreamc.pyx":397
 *                     return '0'
 *             else:
 *                 return (<USHORT*>buf)[0]             # <<<<<<<<<<<<<<
 * 
 *         elif in_type == TDH_INTYPE_INT32:
 */
    /*else*/ {
      __Pyx_XDECREF(__pyx_r);
      __pyx_t_11 = __Pyx_PyInt_From_USHORT((((USHORT *)__pyx_v_buf)[0])); if (unlikely(!__pyx_t_11)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 397; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
      __Pyx_GOTREF(__pyx_t_11);
      __pyx_r = __pyx_t_11;
      __pyx_t_11 = 0;
      goto __pyx_L0;
    }

    /* "kstreamc.pyx":385
 *             return (<SHORT*>buf)[0]
 * 
 *         elif in_type == TDH_INTYPE_UINT16:             # <<<<<<<<<<<<<<
 *             if out_type == TDH_OUTTYPE_HEXINT16:
 *                 return hex((<USHORT*>buf)[0])
 */
    break;

    /* "kstreamc.pyx":399
 *                 return (<USHORT*>buf)[0]
 * 
 *         elif in_type == TDH_INTYPE_INT32:             # <<<<<<<<<<<<<<
 *             return (<LONG*>buf)[0]
 * 
 */
    case TDH_INTYPE_INT32:

    /* "kstreamc.pyx":400
 * 
 *         elif in_type == TDH_INTYPE_INT32:
 *             return (<LONG*>buf)[0]             # <<<<<<<<<<<<<<
 * 
 *         elif in_type == TDH_INTYPE_UINT32:
 */
    __Pyx_XDECREF(__pyx_r);
    __pyx_t_11 = __Pyx_PyInt_From_LONG((((LONG *)__pyx_v_buf)[0])); if (unlikely(!__pyx_t_11)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 400; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    __Pyx_GOTREF(__pyx_t_11);
    __pyx_r = __pyx_t_11;
    __pyx_t_11 = 0;
    goto __pyx_L0;

    /* "kstreamc.pyx":399
 *                 return (<USHORT*>buf)[0]
 * 
 *         elif in_type == TDH_INTYPE_INT32:             # <<<<<<<<<<<<<<
 *             return (<LONG*>buf)[0]
 * 
 */
    break;

    /* "kstreamc.pyx":402
 *             return (<LONG*>buf)[0]
 * 
 *         elif in_type == TDH_INTYPE_UINT32:             # <<<<<<<<<<<<<<
 *             if out_type == TDH_OUTTYPE_HEXINT32:
 *                 return hex((<ULONG*>buf)[0])
 */
    case TDH_INTYPE_UINT32:

    /* "kstreamc.pyx":403
 * 
 *         elif in_type == TDH_INTYPE_UINT32:
 *             if out_type == TDH_OUTTYPE_HEXINT32:             # <<<<<<<<<<<<<<
 *                 return hex((<ULONG*>buf)[0])
 *             # IPv4 address
 */
    __pyx_t_1 = ((__pyx_v_out_type == TDH_OUTTYPE_HEXINT32) != 0);
    if (__pyx_t_1) {

      /* "kstreamc.pyx":404
 *         elif in_type == TDH_INTYPE_UINT32:
 *             if out_type == TDH_OUTTYPE_HEXINT32:
 *                 return hex((<ULONG*>buf)[0])             # <<<<<<<<<<<<<<
 *             # IPv4 address
 *             elif out_type == TDH_OUTTYPE_IPV4:
 */
      __Pyx_XDECREF(__pyx_r);
      __pyx_t_11 = __Pyx_PyInt_From_ULONG((((ULONG *)__pyx_v_buf)[0])); if (unlikely(!__pyx_t_11)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 404; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
      __Pyx_GOTREF(__pyx_t_11);
      __pyx_t_8 = PyTuple_New(1); if (unlikely(!__pyx_t_8)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 404; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
      __Pyx_GOTREF(__pyx_t_8);
      __Pyx_GIVEREF(__pyx_t_11);
      PyTuple_SET_ITEM(__pyx_t_8, 0, __pyx_t_11);
      __pyx_t_11 = 0;
      __pyx_t_11 = __Pyx_PyObject_Call(__pyx_builtin_hex, __pyx_t_8, NULL); if (unlikely(!__pyx_t_11)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 404; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
      __Pyx_GOTREF(__pyx_t_11);
      __Pyx_DECREF(__pyx_t_8); __pyx_t_8 = 0;
      __pyx_r = __pyx_t_11;
      __pyx_t_11 = 0;
      goto __pyx_L0;

      /* "kstreamc.pyx":403
 * 
 *         elif in_type == TDH_INTYPE_UINT32:
 *             if out_type == TDH_OUTTYPE_HEXINT32:             # <<<<<<<<<<<<<<
 *                 return hex((<ULONG*>buf)[0])
 *             # IPv4 address
 */
    }

    /* "kstreamc.pyx":406
 *                 return hex((<ULONG*>buf)[0])
 *             # IPv4 address
 *             elif out_type == TDH_OUTTYPE_IPV4:             # <<<<<<<<<<<<<<
 *                 try:
 *                     # first convert the ip address
 */
    __pyx_t_1 = ((__pyx_v_out_type == TDH_OUTTYPE_IPV4) != 0);
    if (__pyx_t_1) {

      /* "kstreamc.pyx":407
 *             # IPv4 address
 *             elif out_type == TDH_OUTTYPE_IPV4:
 *                 try:             # <<<<<<<<<<<<<<
 *                     # first convert the ip address
 *                     # from network to host byte order
 */
      {
        __Pyx_ExceptionSave(&__pyx_t_4, &__pyx_t_3, &__pyx_t_2);
        __Pyx_XGOTREF(__pyx_t_4);
        __Pyx_XGOTREF(__pyx_t_3);
        __Pyx_XGOTREF(__pyx_t_2);
        /*try:*/ {

          /* "kstreamc.pyx":410
 *                     # first convert the ip address
 *                     # from network to host byte order
 *                     ip = socket.htonl((<ULONG *>buf)[0])             # <<<<<<<<<<<<<<
 *                     return socket.inet_ntoa(struct.pack('!L', ip))
 *                 except (TypeError, struct.error):
 */
          __pyx_t_8 = __Pyx_GetModuleGlobalName(__pyx_n_s_socket); if (unlikely(!__pyx_t_8)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 410; __pyx_clineno = __LINE__; goto __pyx_L38_error;}
          __Pyx_GOTREF(__pyx_t_8);
          __pyx_t_6 = __Pyx_PyObject_GetAttrStr(__pyx_t_8, __pyx_n_s_htonl); if (unlikely(!__pyx_t_6)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 410; __pyx_clineno = __LINE__; goto __pyx_L38_error;}
          __Pyx_GOTREF(__pyx_t_6);
          __Pyx_DECREF(__pyx_t_8); __pyx_t_8 = 0;
          __pyx_t_8 = __Pyx_PyInt_From_ULONG((((ULONG *)__pyx_v_buf)[0])); if (unlikely(!__pyx_t_8)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 410; __pyx_clineno = __LINE__; goto __pyx_L38_error;}
          __Pyx_GOTREF(__pyx_t_8);
          __pyx_t_5 = NULL;
          if (CYTHON_COMPILING_IN_CPYTHON && unlikely(PyMethod_Check(__pyx_t_6))) {
            __pyx_t_5 = PyMethod_GET_SELF(__pyx_t_6);
            if (likely(__pyx_t_5)) {
              PyObject* function = PyMethod_GET_FUNCTION(__pyx_t_6);
              __Pyx_INCREF(__pyx_t_5);
              __Pyx_INCREF(function);
              __Pyx_DECREF_SET(__pyx_t_6, function);
            }
          }
          if (!__pyx_t_5) {
            __pyx_t_11 = __Pyx_PyObject_CallOneArg(__pyx_t_6, __pyx_t_8); if (unlikely(!__pyx_t_11)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 410; __pyx_clineno = __LINE__; goto __pyx_L38_error;}
            __Pyx_DECREF(__pyx_t_8); __pyx_t_8 = 0;
            __Pyx_GOTREF(__pyx_t_11);
          } else {
            __pyx_t_10 = PyTuple_New(1+1); if (unlikely(!__pyx_t_10)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 410; __pyx_clineno = __LINE__; goto __pyx_L38_error;}
            __Pyx_GOTREF(__pyx_t_10);
            __Pyx_GIVEREF(__pyx_t_5); PyTuple_SET_ITEM(__pyx_t_10, 0, __pyx_t_5); __pyx_t_5 = NULL;
            __Pyx_GIVEREF(__pyx_t_8);
            PyTuple_SET_ITEM(__pyx_t_10, 0+1, __pyx_t_8);
            __pyx_t_8 = 0;
            __pyx_t_11 = __Pyx_PyObject_Call(__pyx_t_6, __pyx_t_10, NULL); if (unlikely(!__pyx_t_11)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 410; __pyx_clineno = __LINE__; goto __pyx_L38_error;}
            __Pyx_GOTREF(__pyx_t_11);
            __Pyx_DECREF(__pyx_t_10); __pyx_t_10 = 0;
          }
          __Pyx_DECREF(__pyx_t_6); __pyx_t_6 = 0;
          __pyx_v_ip = __pyx_t_11;
          __pyx_t_11 = 0;

          /* "kstreamc.pyx":411
 *                     # from network to host byte order
 *                     ip = socket.htonl((<ULONG *>buf)[0])
 *                     return socket.inet_ntoa(struct.pack('!L', ip))             # <<<<<<<<<<<<<<
 *                 except (TypeError, struct.error):
 *                     return '0.0.0.0'
 */
          __Pyx_XDECREF(__pyx_r);
          __pyx_t_6 = __Pyx_GetModuleGlobalName(__pyx_n_s_socket); if (unlikely(!__pyx_t_6)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 411; __pyx_clineno = __LINE__; goto __pyx_L38_error;}
          __Pyx_GOTREF(__pyx_t_6);
          __pyx_t_10 = __Pyx_PyObject_GetAttrStr(__pyx_t_6, __pyx_n_s_inet_ntoa); if (unlikely(!__pyx_t_10)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 411; __pyx_clineno = __LINE__; goto __pyx_L38_error;}
          __Pyx_GOTREF(__pyx_t_10);
          __Pyx_DECREF(__pyx_t_6); __pyx_t_6 = 0;
          __pyx_t_8 = __Pyx_GetModuleGlobalName(__pyx_n_s_struct); if (unlikely(!__pyx_t_8)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 411; __pyx_clineno = __LINE__; goto __pyx_L38_error;}
          __Pyx_GOTREF(__pyx_t_8);
          __pyx_t_5 = __Pyx_PyObject_GetAttrStr(__pyx_t_8, __pyx_n_s_pack); if (unlikely(!__pyx_t_5)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 411; __pyx_clineno = __LINE__; goto __pyx_L38_error;}
          __Pyx_GOTREF(__pyx_t_5);
          __Pyx_DECREF(__pyx_t_8); __pyx_t_8 = 0;
          __pyx_t_8 = NULL;
          __pyx_t_12 = 0;
          if (CYTHON_COMPILING_IN_CPYTHON && unlikely(PyMethod_Check(__pyx_t_5))) {
            __pyx_t_8 = PyMethod_GET_SELF(__pyx_t_5);
            if (likely(__pyx_t_8)) {
              PyObject* function = PyMethod_GET_FUNCTION(__pyx_t_5);
              __Pyx_INCREF(__pyx_t_8);
              __Pyx_INCREF(function);
              __Pyx_DECREF_SET(__pyx_t_5, function);
              __pyx_t_12 = 1;
            }
          }
          __pyx_t_13 = PyTuple_New(2+__pyx_t_12); if (unlikely(!__pyx_t_13)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 411; __pyx_clineno = __LINE__; goto __pyx_L38_error;}
          __Pyx_GOTREF(__pyx_t_13);
          if (__pyx_t_8) {
            __Pyx_GIVEREF(__pyx_t_8); PyTuple_SET_ITEM(__pyx_t_13, 0, __pyx_t_8); __pyx_t_8 = NULL;
          }
          __Pyx_INCREF(__pyx_kp_s_L);
          __Pyx_GIVEREF(__pyx_kp_s_L);
          PyTuple_SET_ITEM(__pyx_t_13, 0+__pyx_t_12, __pyx_kp_s_L);
          __Pyx_INCREF(__pyx_v_ip);
          __Pyx_GIVEREF(__pyx_v_ip);
          PyTuple_SET_ITEM(__pyx_t_13, 1+__pyx_t_12, __pyx_v_ip);
          __pyx_t_6 = __Pyx_PyObject_Call(__pyx_t_5, __pyx_t_13, NULL); if (unlikely(!__pyx_t_6)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 411; __pyx_clineno = __LINE__; goto __pyx_L38_error;}
          __Pyx_GOTREF(__pyx_t_6);
          __Pyx_DECREF(__pyx_t_13); __pyx_t_13 = 0;
          __Pyx_DECREF(__pyx_t_5); __pyx_t_5 = 0;
          __pyx_t_5 = NULL;
          if (CYTHON_COMPILING_IN_CPYTHON && unlikely(PyMethod_Check(__pyx_t_10))) {
            __pyx_t_5 = PyMethod_GET_SELF(__pyx_t_10);
            if (likely(__pyx_t_5)) {
              PyObject* function = PyMethod_GET_FUNCTION(__pyx_t_10);
              __Pyx_INCREF(__pyx_t_5);
              __Pyx_INCREF(function);
              __Pyx_DECREF_SET(__pyx_t_10, function);
            }
          }
          if (!__pyx_t_5) {
            __pyx_t_11 = __Pyx_PyObject_CallOneArg(__pyx_t_10, __pyx_t_6); if (unlikely(!__pyx_t_11)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 411; __pyx_clineno = __LINE__; goto __pyx_L38_error;}
            __Pyx_DECREF(__pyx_t_6); __pyx_t_6 = 0;
            __Pyx_GOTREF(__pyx_t_11);
          } else {
            __pyx_t_13 = PyTuple_New(1+1); if (unlikely(!__pyx_t_13)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 411; __pyx_clineno = __LINE__; goto __pyx_L38_error;}
            __Pyx_GOTREF(__pyx_t_13);
            __Pyx_GIVEREF(__pyx_t_5); PyTuple_SET_ITEM(__pyx_t_13, 0, __pyx_t_5); __pyx_t_5 = NULL;
            __Pyx_GIVEREF(__pyx_t_6);
            PyTuple_SET_ITEM(__pyx_t_13, 0+1, __pyx_t_6);
            __pyx_t_6 = 0;
            __pyx_t_11 = __Pyx_PyObject_Call(__pyx_t_10, __pyx_t_13, NULL); if (unlikely(!__pyx_t_11)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 411; __pyx_clineno = __LINE__; goto __pyx_L38_error;}
            __Pyx_GOTREF(__pyx_t_11);
            __Pyx_DECREF(__pyx_t_13); __pyx_t_13 = 0;
          }
          __Pyx_DECREF(__pyx_t_10); __pyx_t_10 = 0;
          __pyx_r = __pyx_t_11;
          __pyx_t_11 = 0;
          goto __pyx_L42_try_return;

          /* "kstreamc.pyx":407
 *             # IPv4 address
 *             elif out_type == TDH_OUTTYPE_IPV4:
 *                 try:             # <<<<<<<<<<<<<<
 *                     # first convert the ip address
 *                     # from network to host byte order
 */
        }
        __pyx_L38_error:;
        __Pyx_XDECREF(__pyx_t_8); __pyx_t_8 = 0;
        __Pyx_XDECREF(__pyx_t_5); __pyx_t_5 = 0;
        __Pyx_XDECREF(__pyx_t_6); __pyx_t_6 = 0;
        __Pyx_XDECREF(__pyx_t_13); __pyx_t_13 = 0;
        __Pyx_XDECREF(__pyx_t_10); __pyx_t_10 = 0;
        __Pyx_XDECREF(__pyx_t_11); __pyx_t_11 = 0;

        /* "kstreamc.pyx":412
 *                     ip = socket.htonl((<ULONG *>buf)[0])
 *                     return socket.inet_ntoa(struct.pack('!L', ip))
 *                 except (TypeError, struct.error):             # <<<<<<<<<<<<<<
 *                     return '0.0.0.0'
 *             else:
 */
        __pyx_t_11 = __Pyx_GetModuleGlobalName(__pyx_n_s_struct); if (unlikely(!__pyx_t_11)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 412; __pyx_clineno = __LINE__; goto __pyx_L40_except_error;}
        __Pyx_GOTREF(__pyx_t_11);
        __pyx_t_10 = __Pyx_PyObject_GetAttrStr(__pyx_t_11, __pyx_n_s_error); if (unlikely(!__pyx_t_10)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 412; __pyx_clineno = __LINE__; goto __pyx_L40_except_error;}
        __Pyx_GOTREF(__pyx_t_10);
        __Pyx_DECREF(__pyx_t_11); __pyx_t_11 = 0;
        __pyx_t_7 = PyErr_ExceptionMatches(__pyx_builtin_TypeError) || PyErr_ExceptionMatches(__pyx_t_10);
        __Pyx_DECREF(__pyx_t_10); __pyx_t_10 = 0;
        if (__pyx_t_7) {
          __Pyx_AddTraceback("kstreamc.KEventStreamCollector._parse_property", __pyx_clineno, __pyx_lineno, __pyx_filename);
          if (__Pyx_GetException(&__pyx_t_10, &__pyx_t_11, &__pyx_t_13) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 412; __pyx_clineno = __LINE__; goto __pyx_L40_except_error;}
          __Pyx_GOTREF(__pyx_t_10);
          __Pyx_GOTREF(__pyx_t_11);
          __Pyx_GOTREF(__pyx_t_13);

          /* "kstreamc.pyx":413
 *                     return socket.inet_ntoa(struct.pack('!L', ip))
 *                 except (TypeError, struct.error):
 *                     return '0.0.0.0'             # <<<<<<<<<<<<<<
 *             else:
 *                 return (<ULONG *>buf)[0]
 */
          __Pyx_XDECREF(__pyx_r);
          __Pyx_INCREF(__pyx_kp_s_0_0_0_0);
          __pyx_r = __pyx_kp_s_0_0_0_0;
          __Pyx_DECREF(__pyx_t_10); __pyx_t_10 = 0;
          __Pyx_DECREF(__pyx_t_11); __pyx_t_11 = 0;
          __Pyx_DECREF(__pyx_t_13); __pyx_t_13 = 0;
          goto __pyx_L41_except_return;
        }
        goto __pyx_L40_except_error;
        __pyx_L40_except_error:;

        /* "kstreamc.pyx":407
 *             # IPv4 address
 *             elif out_type == TDH_OUTTYPE_IPV4:
 *                 try:             # <<<<<<<<<<<<<<
 *                     # first convert the ip address
 *                     # from network to host byte order
 */
        __Pyx_XGIVEREF(__pyx_t_4);
        __Pyx_XGIVEREF(__pyx_t_3);
        __Pyx_XGIVEREF(__pyx_t_2);
        __Pyx_ExceptionReset(__pyx_t_4, __pyx_t_3, __pyx_t_2);
        goto __pyx_L1_error;
        __pyx_L42_try_return:;
        __Pyx_XGIVEREF(__pyx_t_4);
        __Pyx_XGIVEREF(__pyx_t_3);
        __Pyx_XGIVEREF(__pyx_t_2);
        __Pyx_ExceptionReset(__pyx_t_4, __pyx_t_3, __pyx_t_2);
        goto __pyx_L0;
        __pyx_L41_except_return:;
        __Pyx_XGIVEREF(__pyx_t_4);
        __Pyx_XGIVEREF(__pyx_t_3);
        __Pyx_XGIVEREF(__pyx_t_2);
        __Pyx_ExceptionReset(__pyx_t_4, __pyx_t_3, __pyx_t_2);
        goto __pyx_L0;
      }

      /* "kstreamc.pyx":406
 *                 return hex((<ULONG*>buf)[0])
 *             # IPv4 address
 *             elif out_type == TDH_OUTTYPE_IPV4:             # <<<<<<<<<<<<<<
 *                 try:
 *                     # first convert the ip address
 */
    }

    /* "kstreamc.pyx":415
 *                     return '0.0.0.0'
 *             else:
 *                 return (<ULONG *>buf)[0]             # <<<<<<<<<<<<<<
 * 
 *         elif in_type == TDH_INTYPE_INT64:
 */
    /*else*/ {
      __Pyx_XDECREF(__pyx_r);
      __pyx_t_13 = __Pyx_PyInt_From_ULONG((((ULONG *)__pyx_v_buf)[0])); if (unlikely(!__pyx_t_13)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 415; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
      __Pyx_GOTREF(__pyx_t_13);
      __pyx_r = __pyx_t_13;
      __pyx_t_13 = 0;
      goto __pyx_L0;
    }

    /* "kstreamc.pyx":402
 *             return (<LONG*>buf)[0]
 * 
 *         elif in_type == TDH_INTYPE_UINT32:             # <<<<<<<<<<<<<<
 *             if out_type == TDH_OUTTYPE_HEXINT32:
 *                 return hex((<ULONG*>buf)[0])
 */
    break;

    /* "kstreamc.pyx":417
 *                 return (<ULONG *>buf)[0]
 * 
 *         elif in_type == TDH_INTYPE_INT64:             # <<<<<<<<<<<<<<
 *             return (<LONGLONG*>buf)[0]
 *         elif in_type == TDH_INTYPE_UINT64:
 */
    case TDH_INTYPE_INT64:

    /* "kstreamc.pyx":418
 * 
 *         elif in_type == TDH_INTYPE_INT64:
 *             return (<LONGLONG*>buf)[0]             # <<<<<<<<<<<<<<
 *         elif in_type == TDH_INTYPE_UINT64:
 *             if out_type == TDH_OUTTYPE_HEXINT64:
 */
    __Pyx_XDECREF(__pyx_r);
    __pyx_t_13 = __Pyx_PyInt_From_LONGLONG((((LONGLONG *)__pyx_v_buf)[0])); if (unlikely(!__pyx_t_13)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 418; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    __Pyx_GOTREF(__pyx_t_13);
    __pyx_r = __pyx_t_13;
    __pyx_t_13 = 0;
    goto __pyx_L0;

    /* "kstreamc.pyx":417
 *                 return (<ULONG *>buf)[0]
 * 
 *         elif in_type == TDH_INTYPE_INT64:             # <<<<<<<<<<<<<<
 *             return (<LONGLONG*>buf)[0]
 *         elif in_type == TDH_INTYPE_UINT64:
 */
    break;

    /* "kstreamc.pyx":419
 *         elif in_type == TDH_INTYPE_INT64:
 *             return (<LONGLONG*>buf)[0]
 *         elif in_type == TDH_INTYPE_UINT64:             # <<<<<<<<<<<<<<
 *             if out_type == TDH_OUTTYPE_HEXINT64:
 *                 return hex((<ULONGLONG*>buf)[0])
 */
    case TDH_INTYPE_UINT64:

    /* "kstreamc.pyx":420
 *             return (<LONGLONG*>buf)[0]
 *         elif in_type == TDH_INTYPE_UINT64:
 *             if out_type == TDH_OUTTYPE_HEXINT64:             # <<<<<<<<<<<<<<
 *                 return hex((<ULONGLONG*>buf)[0])
 *             else:
 */
    __pyx_t_1 = ((__pyx_v_out_type == TDH_OUTTYPE_HEXINT64) != 0);
    if (__pyx_t_1) {

      /* "kstreamc.pyx":421
 *         elif in_type == TDH_INTYPE_UINT64:
 *             if out_type == TDH_OUTTYPE_HEXINT64:
 *                 return hex((<ULONGLONG*>buf)[0])             # <<<<<<<<<<<<<<
 *             else:
 *                 return (<ULONGLONG*>buf)[0]
 */
      __Pyx_XDECREF(__pyx_r);
      __pyx_t_13 = __Pyx_PyInt_From_ULONGLONG((((ULONGLONG *)__pyx_v_buf)[0])); if (unlikely(!__pyx_t_13)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 421; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
      __Pyx_GOTREF(__pyx_t_13);
      __pyx_t_11 = PyTuple_New(1); if (unlikely(!__pyx_t_11)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 421; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
      __Pyx_GOTREF(__pyx_t_11);
      __Pyx_GIVEREF(__pyx_t_13);
      PyTuple_SET_ITEM(__pyx_t_11, 0, __pyx_t_13);
      __pyx_t_13 = 0;
      __pyx_t_13 = __Pyx_PyObject_Call(__pyx_builtin_hex, __pyx_t_11, NULL); if (unlikely(!__pyx_t_13)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 421; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
      __Pyx_GOTREF(__pyx_t_13);
      __Pyx_DECREF(__pyx_t_11); __pyx_t_11 = 0;
      __pyx_r = __pyx_t_13;
      __pyx_t_13 = 0;
      goto __pyx_L0;

      /* "kstreamc.pyx":420
 *             return (<LONGLONG*>buf)[0]
 *         elif in_type == TDH_INTYPE_UINT64:
 *             if out_type == TDH_OUTTYPE_HEXINT64:             # <<<<<<<<<<<<<<
 *                 return hex((<ULONGLONG*>buf)[0])
 *             else:
 */
    }

    /* "kstreamc.pyx":423
 *                 return hex((<ULONGLONG*>buf)[0])
 *             else:
 *                 return (<ULONGLONG*>buf)[0]             # <<<<<<<<<<<<<<
 * 
 *         elif in_type == TDH_INTYPE_HEXINT32:
 */
    /*else*/ {
      __Pyx_XDECREF(__pyx_r);
      __pyx_t_13 = __Pyx_PyInt_From_ULONGLONG((((ULONGLONG *)__pyx_v_buf)[0])); if (unlikely(!__pyx_t_13)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 423; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
      __Pyx_GOTREF(__pyx_t_13);
      __pyx_r = __pyx_t_13;
      __pyx_t_13 = 0;
      goto __pyx_L0;
    }

    /* "kstreamc.pyx":419
 *         elif in_type == TDH_INTYPE_INT64:
 *             return (<LONGLONG*>buf)[0]
 *         elif in_type == TDH_INTYPE_UINT64:             # <<<<<<<<<<<<<<
 *             if out_type == TDH_OUTTYPE_HEXINT64:
 *                 return hex((<ULONGLONG*>buf)[0])
 */
    break;

    /* "kstreamc.pyx":425
 *                 return (<ULONGLONG*>buf)[0]
 * 
 *         elif in_type == TDH_INTYPE_HEXINT32:             # <<<<<<<<<<<<<<
 *              return hex((<ULONG*>buf)[0])
 *         elif in_type ==  TDH_INTYPE_HEXINT64:
 */
    case TDH_INTYPE_HEXINT32:

    /* "kstreamc.pyx":426
 * 
 *         elif in_type == TDH_INTYPE_HEXINT32:
 *              return hex((<ULONG*>buf)[0])             # <<<<<<<<<<<<<<
 *         elif in_type ==  TDH_INTYPE_HEXINT64:
 *             return hex((<ULONGLONG*>buf)[0])
 */
    __Pyx_XDECREF(__pyx_r);
    __pyx_t_13 = __Pyx_PyInt_From_ULONG((((ULONG *)__pyx_v_buf)[0])); if (unlikely(!__pyx_t_13)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 426; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    __Pyx_GOTREF(__pyx_t_13);
    __pyx_t_11 = PyTuple_New(1); if (unlikely(!__pyx_t_11)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 426; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    __Pyx_GOTREF(__pyx_t_11);
    __Pyx_GIVEREF(__pyx_t_13);
    PyTuple_SET_ITEM(__pyx_t_11, 0, __pyx_t_13);
    __pyx_t_13 = 0;
    __pyx_t_13 = __Pyx_PyObject_Call(__pyx_builtin_hex, __pyx_t_11, NULL); if (unlikely(!__pyx_t_13)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 426; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    __Pyx_GOTREF(__pyx_t_13);
    __Pyx_DECREF(__pyx_t_11); __pyx_t_11 = 0;
    __pyx_r = __pyx_t_13;
    __pyx_t_13 = 0;
    goto __pyx_L0;

    /* "kstreamc.pyx":425
 *                 return (<ULONGLONG*>buf)[0]
 * 
 *         elif in_type == TDH_INTYPE_HEXINT32:             # <<<<<<<<<<<<<<
 *              return hex((<ULONG*>buf)[0])
 *         elif in_type ==  TDH_INTYPE_HEXINT64:
 */
    break;

    /* "kstreamc.pyx":427
 *         elif in_type == TDH_INTYPE_HEXINT32:
 *              return hex((<ULONG*>buf)[0])
 *         elif in_type ==  TDH_INTYPE_HEXINT64:             # <<<<<<<<<<<<<<
 *             return hex((<ULONGLONG*>buf)[0])
 * 
 */
    case TDH_INTYPE_HEXINT64:

    /* "kstreamc.pyx":428
 *              return hex((<ULONG*>buf)[0])
 *         elif in_type ==  TDH_INTYPE_HEXINT64:
 *             return hex((<ULONGLONG*>buf)[0])             # <<<<<<<<<<<<<<
 * 
 *         elif in_type == TDH_INTYPE_FLOAT:
 */
    __Pyx_XDECREF(__pyx_r);
    __pyx_t_13 = __Pyx_PyInt_From_ULONGLONG((((ULONGLONG *)__pyx_v_buf)[0])); if (unlikely(!__pyx_t_13)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 428; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    __Pyx_GOTREF(__pyx_t_13);
    __pyx_t_11 = PyTuple_New(1); if (unlikely(!__pyx_t_11)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 428; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    __Pyx_GOTREF(__pyx_t_11);
    __Pyx_GIVEREF(__pyx_t_13);
    PyTuple_SET_ITEM(__pyx_t_11, 0, __pyx_t_13);
    __pyx_t_13 = 0;
    __pyx_t_13 = __Pyx_PyObject_Call(__pyx_builtin_hex, __pyx_t_11, NULL); if (unlikely(!__pyx_t_13)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 428; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    __Pyx_GOTREF(__pyx_t_13);
    __Pyx_DECREF(__pyx_t_11); __pyx_t_11 = 0;
    __pyx_r = __pyx_t_13;
    __pyx_t_13 = 0;
    goto __pyx_L0;

    /* "kstreamc.pyx":427
 *         elif in_type == TDH_INTYPE_HEXINT32:
 *              return hex((<ULONG*>buf)[0])
 *         elif in_type ==  TDH_INTYPE_HEXINT64:             # <<<<<<<<<<<<<<
 *             return hex((<ULONGLONG*>buf)[0])
 * 
 */
    break;

    /* "kstreamc.pyx":430
 *             return hex((<ULONGLONG*>buf)[0])
 * 
 *         elif in_type == TDH_INTYPE_FLOAT:             # <<<<<<<<<<<<<<
 *             return (<FLOAT*>buf)[0]
 *         elif in_type == TDH_INTYPE_DOUBLE:
 */
    case TDH_INTYPE_FLOAT:

    /* "kstreamc.pyx":431
 * 
 *         elif in_type == TDH_INTYPE_FLOAT:
 *             return (<FLOAT*>buf)[0]             # <<<<<<<<<<<<<<
 *         elif in_type == TDH_INTYPE_DOUBLE:
 *             return (<DOUBLE*>buf)[0]
 */
    __Pyx_XDECREF(__pyx_r);
    __pyx_t_13 = PyFloat_FromDouble((((FLOAT *)__pyx_v_buf)[0])); if (unlikely(!__pyx_t_13)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 431; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    __Pyx_GOTREF(__pyx_t_13);
    __pyx_r = __pyx_t_13;
    __pyx_t_13 = 0;
    goto __pyx_L0;

    /* "kstreamc.pyx":430
 *             return hex((<ULONGLONG*>buf)[0])
 * 
 *         elif in_type == TDH_INTYPE_FLOAT:             # <<<<<<<<<<<<<<
 *             return (<FLOAT*>buf)[0]
 *         elif in_type == TDH_INTYPE_DOUBLE:
 */
    break;

    /* "kstreamc.pyx":432
 *         elif in_type == TDH_INTYPE_FLOAT:
 *             return (<FLOAT*>buf)[0]
 *         elif in_type == TDH_INTYPE_DOUBLE:             # <<<<<<<<<<<<<<
 *             return (<DOUBLE*>buf)[0]
 *         elif in_type == TDH_INTYPE_UNICODECHAR:
 */
    case TDH_INTYPE_DOUBLE:

    /* "kstreamc.pyx":433
 *             return (<FLOAT*>buf)[0]
 *         elif in_type == TDH_INTYPE_DOUBLE:
 *             return (<DOUBLE*>buf)[0]             # <<<<<<<<<<<<<<
 *         elif in_type == TDH_INTYPE_UNICODECHAR:
 *             return (<WCHAR*>buf)[0]
 */
    __Pyx_XDECREF(__pyx_r);
    __pyx_t_13 = PyFloat_FromDouble((((DOUBLE *)__pyx_v_buf)[0])); if (unlikely(!__pyx_t_13)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 433; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    __Pyx_GOTREF(__pyx_t_13);
    __pyx_r = __pyx_t_13;
    __pyx_t_13 = 0;
    goto __pyx_L0;

    /* "kstreamc.pyx":432
 *         elif in_type == TDH_INTYPE_FLOAT:
 *             return (<FLOAT*>buf)[0]
 *         elif in_type == TDH_INTYPE_DOUBLE:             # <<<<<<<<<<<<<<
 *             return (<DOUBLE*>buf)[0]
 *         elif in_type == TDH_INTYPE_UNICODECHAR:
 */
    break;

    /* "kstreamc.pyx":434
 *         elif in_type == TDH_INTYPE_DOUBLE:
 *             return (<DOUBLE*>buf)[0]
 *         elif in_type == TDH_INTYPE_UNICODECHAR:             # <<<<<<<<<<<<<<
 *             return (<WCHAR*>buf)[0]
 *         elif in_type == TDH_INTYPE_ANSICHAR:
 */
    case TDH_INTYPE_UNICODECHAR:

    /* "kstreamc.pyx":435
 *             return (<DOUBLE*>buf)[0]
 *         elif in_type == TDH_INTYPE_UNICODECHAR:
 *             return (<WCHAR*>buf)[0]             # <<<<<<<<<<<<<<
 *         elif in_type == TDH_INTYPE_ANSICHAR:
 *             return (<CHAR*>buf)[0]
 */
    __Pyx_XDECREF(__pyx_r);
    __pyx_t_13 = PyUnicode_FromOrdinal((((WCHAR *)__pyx_v_buf)[0])); if (unlikely(!__pyx_t_13)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 435; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    __Pyx_GOTREF(__pyx_t_13);
    __pyx_r = __pyx_t_13;
    __pyx_t_13 = 0;
    goto __pyx_L0;

    /* "kstreamc.pyx":434
 *         elif in_type == TDH_INTYPE_DOUBLE:
 *             return (<DOUBLE*>buf)[0]
 *         elif in_type == TDH_INTYPE_UNICODECHAR:             # <<<<<<<<<<<<<<
 *             return (<WCHAR*>buf)[0]
 *         elif in_type == TDH_INTYPE_ANSICHAR:
 */
    break;

    /* "kstreamc.pyx":436
 *         elif in_type == TDH_INTYPE_UNICODECHAR:
 *             return (<WCHAR*>buf)[0]
 *         elif in_type == TDH_INTYPE_ANSICHAR:             # <<<<<<<<<<<<<<
 *             return (<CHAR*>buf)[0]
 * 
 */
    case TDH_INTYPE_ANSICHAR:

    /* "kstreamc.pyx":437
 *             return (<WCHAR*>buf)[0]
 *         elif in_type == TDH_INTYPE_ANSICHAR:
 *             return (<CHAR*>buf)[0]             # <<<<<<<<<<<<<<
 * 
 *         elif in_type == TDH_INTYPE_SID:
 */
    __Pyx_XDECREF(__pyx_r);
    __pyx_t_13 = __Pyx_PyInt_From_CHAR((((CHAR *)__pyx_v_buf)[0])); if (unlikely(!__pyx_t_13)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 437; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    __Pyx_GOTREF(__pyx_t_13);
    __pyx_r = __pyx_t_13;
    __pyx_t_13 = 0;
    goto __pyx_L0;

    /* "kstreamc.pyx":436
 *         elif in_type == TDH_INTYPE_UNICODECHAR:
 *             return (<WCHAR*>buf)[0]
 *         elif in_type == TDH_INTYPE_ANSICHAR:             # <<<<<<<<<<<<<<
 *             return (<CHAR*>buf)[0]
 * 
 */
    break;

    /* "kstreamc.pyx":439
 *             return (<CHAR*>buf)[0]
 * 
 *         elif in_type == TDH_INTYPE_SID:             # <<<<<<<<<<<<<<
 *             # resolve account and domain name
 *             # from the SID (Security Identifier)
 */
    case TDH_INTYPE_SID:

    /* "kstreamc.pyx":442
 *             # resolve account and domain name
 *             # from the SID (Security Identifier)
 *             return self._lookup_sid(buf, False)             # <<<<<<<<<<<<<<
 *         elif in_type == TDH_INTYPE_WBEMSID:
 *             # resolve account name and domain
 */
    __Pyx_XDECREF(__pyx_r);
    __pyx_t_13 = ((struct __pyx_vtabstruct_8kstreamc_KEventStreamCollector *)__pyx_v_self->__pyx_vtab)->_lookup_sid(__pyx_v_self, __pyx_v_buf, 0); if (unlikely(!__pyx_t_13)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 442; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    __Pyx_GOTREF(__pyx_t_13);
    __pyx_r = __pyx_t_13;
    __pyx_t_13 = 0;
    goto __pyx_L0;

    /* "kstreamc.pyx":439
 *             return (<CHAR*>buf)[0]
 * 
 *         elif in_type == TDH_INTYPE_SID:             # <<<<<<<<<<<<<<
 *             # resolve account and domain name
 *             # from the SID (Security Identifier)
 */
    break;

    /* "kstreamc.pyx":443
 *             # from the SID (Security Identifier)
 *             return self._lookup_sid(buf, False)
 *         elif in_type == TDH_INTYPE_WBEMSID:             # <<<<<<<<<<<<<<
 *             # resolve account name and domain
 *             # from the WBEM SID (TOKEN_USER + SID)
 */
    case TDH_INTYPE_WBEMSID:

    /* "kstreamc.pyx":446
 *             # resolve account name and domain
 *             # from the WBEM SID (TOKEN_USER + SID)
 *             if (<ULONG*>buf)[0] > 0:             # <<<<<<<<<<<<<<
 *                 return self._lookup_sid(buf, True)
 * 
 */
    __pyx_t_1 = (((((ULONG *)__pyx_v_buf)[0]) > 0) != 0);
    if (__pyx_t_1) {

      /* "kstreamc.pyx":447
 *             # from the WBEM SID (TOKEN_USER + SID)
 *             if (<ULONG*>buf)[0] > 0:
 *                 return self._lookup_sid(buf, True)             # <<<<<<<<<<<<<<
 * 
 *     cdef _lookup_sid(self, BYTE* buf, BOOL wbem_sid):
 */
      __Pyx_XDECREF(__pyx_r);
      __pyx_t_13 = ((struct __pyx_vtabstruct_8kstreamc_KEventStreamCollector *)__pyx_v_self->__pyx_vtab)->_lookup_sid(__pyx_v_self, __pyx_v_buf, 1); if (unlikely(!__pyx_t_13)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 447; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
      __Pyx_GOTREF(__pyx_t_13);
      __pyx_r = __pyx_t_13;
      __pyx_t_13 = 0;
      goto __pyx_L0;

      /* "kstreamc.pyx":446
 *             # resolve account name and domain
 *             # from the WBEM SID (TOKEN_USER + SID)
 *             if (<ULONG*>buf)[0] > 0:             # <<<<<<<<<<<<<<
 *                 return self._lookup_sid(buf, True)
 * 
 */
    }

    /* "kstreamc.pyx":443
 *             # from the SID (Security Identifier)
 *             return self._lookup_sid(buf, False)
 *         elif in_type == TDH_INTYPE_WBEMSID:             # <<<<<<<<<<<<<<
 *             # resolve account name and domain
 *             # from the WBEM SID (TOKEN_USER + SID)
 */
    break;
    default: break;
  }

  /* "kstreamc.pyx":337
 *         free(info_buffer)
 * 
 *     cdef _parse_property(self, USHORT in_type, USHORT out_type, BYTE* buf):             # <<<<<<<<<<<<<<
 *         """Parses the property value.
 * 
 */

  /* function exit code */
  __pyx_r = Py_None; __Pyx_INCREF(Py_None);
  goto __pyx_L0;
  __pyx_L1_error:;
  __Pyx_XDECREF(__pyx_t_5);
  __Pyx_XDECREF(__pyx_t_6);
  __Pyx_XDECREF(__pyx_t_8);
  __Pyx_XDECREF(__pyx_t_10);
  __Pyx_XDECREF(__pyx_t_11);
  __Pyx_XDECREF(__pyx_t_13);
  __Pyx_AddTraceback("kstreamc.KEventStreamCollector._parse_property", __pyx_clineno, __pyx_lineno, __pyx_filename);
  __pyx_r = 0;
  __pyx_L0:;
  __Pyx_XDECREF(__pyx_v_ip);
  __Pyx_XGIVEREF(__pyx_r);
  __Pyx_RefNannyFinishContext();
  return __pyx_r;
}

/* "kstreamc.pyx":449
 *                 return self._lookup_sid(buf, True)
 * 
 *     cdef _lookup_sid(self, BYTE* buf, BOOL wbem_sid):             # <<<<<<<<<<<<<<
 *         cdef wchar_t user_name[MAX_NAME]
 *         cdef wchar_t domain_name[MAX_NAME]
 */

static PyObject *__pyx_f_8kstreamc_21KEventStreamCollector__lookup_sid(struct __pyx_obj_8kstreamc_KEventStreamCollector *__pyx_v_self, BYTE *__pyx_v_buf, BOOL __pyx_v_wbem_sid) {
  wchar_t __pyx_v_user_name[__pyx_e_8kstreamc_MAX_NAME];
  wchar_t __pyx_v_domain_name[__pyx_e_8kstreamc_MAX_NAME];
  DWORD __pyx_v_user_name_size;
  DWORD __pyx_v_domain_name_size;
  SID_NAME_USE __pyx_v_sid_type;
  PyObject *__pyx_r = NULL;
  __Pyx_RefNannyDeclarations
  int __pyx_t_1;
  PyObject *__pyx_t_2 = NULL;
  Py_ssize_t __pyx_t_3;
  int __pyx_lineno = 0;
  const char *__pyx_filename = NULL;
  int __pyx_clineno = 0;
  __Pyx_RefNannySetupContext("_lookup_sid", 0);

  /* "kstreamc.pyx":452
 *         cdef wchar_t user_name[MAX_NAME]
 *         cdef wchar_t domain_name[MAX_NAME]
 *         cdef DWORD user_name_size = MAX_NAME             # <<<<<<<<<<<<<<
 *         cdef DWORD domain_name_size = MAX_NAME
 *         cdef SID_NAME_USE sid_type
 */
  __pyx_v_user_name_size = __pyx_e_8kstreamc_MAX_NAME;

  /* "kstreamc.pyx":453
 *         cdef wchar_t domain_name[MAX_NAME]
 *         cdef DWORD user_name_size = MAX_NAME
 *         cdef DWORD domain_name_size = MAX_NAME             # <<<<<<<<<<<<<<
 *         cdef SID_NAME_USE sid_type
 * 
 */
  __pyx_v_domain_name_size = __pyx_e_8kstreamc_MAX_NAME;

  /* "kstreamc.pyx":456
 *         cdef SID_NAME_USE sid_type
 * 
 *         if wbem_sid:             # <<<<<<<<<<<<<<
 *             # adjust the size of the TOKEN_USER structure
 *             buf += self.pointer_size * 2
 */
  __pyx_t_1 = (__pyx_v_wbem_sid != 0);
  if (__pyx_t_1) {

    /* "kstreamc.pyx":458
 *         if wbem_sid:
 *             # adjust the size of the TOKEN_USER structure
 *             buf += self.pointer_size * 2             # <<<<<<<<<<<<<<
 * 
 *         if LookupAccountSid(NULL, <SID*>buf,
 */
    __pyx_t_2 = PyNumber_Multiply(__pyx_v_self->pointer_size, __pyx_int_2); if (unlikely(!__pyx_t_2)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 458; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    __Pyx_GOTREF(__pyx_t_2);
    __pyx_t_3 = __Pyx_PyIndex_AsSsize_t(__pyx_t_2); if (unlikely((__pyx_t_3 == (Py_ssize_t)-1) && PyErr_Occurred())) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 458; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    __Pyx_DECREF(__pyx_t_2); __pyx_t_2 = 0;
    __pyx_v_buf = (__pyx_v_buf + __pyx_t_3);

    /* "kstreamc.pyx":456
 *         cdef SID_NAME_USE sid_type
 * 
 *         if wbem_sid:             # <<<<<<<<<<<<<<
 *             # adjust the size of the TOKEN_USER structure
 *             buf += self.pointer_size * 2
 */
  }

  /* "kstreamc.pyx":460
 *             buf += self.pointer_size * 2
 * 
 *         if LookupAccountSid(NULL, <SID*>buf,             # <<<<<<<<<<<<<<
 *                             user_name,
 *                             &user_name_size,
 */
  __pyx_t_1 = (LookupAccountSid(NULL, ((SID *)__pyx_v_buf), __pyx_v_user_name, (&__pyx_v_user_name_size), __pyx_v_domain_name, (&__pyx_v_domain_name_size), (&__pyx_v_sid_type)) != 0);
  if (__pyx_t_1) {
    goto __pyx_L4;
  }

  /* "kstreamc.pyx":470
 *             # I need help here ;(
 *         else:
 *             return 'unknown'             # <<<<<<<<<<<<<<
 * 
 *     cdef _assemble_type(self, GUID guid, UCHAR opcode):
 */
  /*else*/ {
    __Pyx_XDECREF(__pyx_r);
    __Pyx_INCREF(__pyx_n_s_unknown);
    __pyx_r = __pyx_n_s_unknown;
    goto __pyx_L0;
  }
  __pyx_L4:;

  /* "kstreamc.pyx":449
 *                 return self._lookup_sid(buf, True)
 * 
 *     cdef _lookup_sid(self, BYTE* buf, BOOL wbem_sid):             # <<<<<<<<<<<<<<
 *         cdef wchar_t user_name[MAX_NAME]
 *         cdef wchar_t domain_name[MAX_NAME]
 */

  /* function exit code */
  __pyx_r = Py_None; __Pyx_INCREF(Py_None);
  goto __pyx_L0;
  __pyx_L1_error:;
  __Pyx_XDECREF(__pyx_t_2);
  __Pyx_AddTraceback("kstreamc.KEventStreamCollector._lookup_sid", __pyx_clineno, __pyx_lineno, __pyx_filename);
  __pyx_r = 0;
  __pyx_L0:;
  __Pyx_XGIVEREF(__pyx_r);
  __Pyx_RefNannyFinishContext();
  return __pyx_r;
}

/* "kstreamc.pyx":472
 *             return 'unknown'
 * 
 *     cdef _assemble_type(self, GUID guid, UCHAR opcode):             # <<<<<<<<<<<<<<
 *         """Packs an event type into tuple.
 * 
 */

static PyObject *__pyx_f_8kstreamc_21KEventStreamCollector__assemble_type(struct __pyx_obj_8kstreamc_KEventStreamCollector *__pyx_v_self, GUID __pyx_v_guid, UCHAR __pyx_v_opcode) {
  wchar_t __pyx_v_buf[__pyx_e_8kstreamc_GUID_LEN];
  PyObject *__pyx_v_kkey = NULL;
  int __pyx_v_chars;
  PyObject *__pyx_v_pystr = NULL;
  PyObject *__pyx_r = NULL;
  __Pyx_RefNannyDeclarations
  PyObject *__pyx_t_1 = NULL;
  PyObject *__pyx_t_2 = NULL;
  PyObject *__pyx_t_3 = NULL;
  PyObject *__pyx_t_4 = NULL;
  PyObject *__pyx_t_5 = NULL;
  PyObject *__pyx_t_6 = NULL;
  int __pyx_t_7;
  int __pyx_t_8;
  PyObject *__pyx_t_9;
  int __pyx_lineno = 0;
  const char *__pyx_filename = NULL;
  int __pyx_clineno = 0;
  __Pyx_RefNannySetupContext("_assemble_type", 0);

  /* "kstreamc.pyx":491
 *         """
 *         cdef wchar_t buf[GUID_LEN]
 *         kkey = '%s-%s-%s-%s-%d' % (guid.Data1, guid.Data2,             # <<<<<<<<<<<<<<
 *                                    guid.Data3, guid.Data4,
 *                                    opcode)
 */
  __pyx_t_1 = __Pyx_PyInt_From_DWORD(__pyx_v_guid.Data1); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 491; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_1);
  __pyx_t_2 = __Pyx_PyInt_From_WORD(__pyx_v_guid.Data2); if (unlikely(!__pyx_t_2)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 491; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_2);

  /* "kstreamc.pyx":492
 *         cdef wchar_t buf[GUID_LEN]
 *         kkey = '%s-%s-%s-%s-%d' % (guid.Data1, guid.Data2,
 *                                    guid.Data3, guid.Data4,             # <<<<<<<<<<<<<<
 *                                    opcode)
 *         # lookup for resolved
 */
  __pyx_t_3 = __Pyx_PyInt_From_WORD(__pyx_v_guid.Data3); if (unlikely(!__pyx_t_3)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 492; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_3);
  __pyx_t_4 = __Pyx_PyObject_FromCString(__pyx_v_guid.Data4); if (unlikely(!__pyx_t_4)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 492; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_4);

  /* "kstreamc.pyx":493
 *         kkey = '%s-%s-%s-%s-%d' % (guid.Data1, guid.Data2,
 *                                    guid.Data3, guid.Data4,
 *                                    opcode)             # <<<<<<<<<<<<<<
 *         # lookup for resolved
 *         # kernel event types
 */
  __pyx_t_5 = __Pyx_PyInt_From_UCHAR(__pyx_v_opcode); if (unlikely(!__pyx_t_5)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 493; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_5);

  /* "kstreamc.pyx":491
 *         """
 *         cdef wchar_t buf[GUID_LEN]
 *         kkey = '%s-%s-%s-%s-%d' % (guid.Data1, guid.Data2,             # <<<<<<<<<<<<<<
 *                                    guid.Data3, guid.Data4,
 *                                    opcode)
 */
  __pyx_t_6 = PyTuple_New(5); if (unlikely(!__pyx_t_6)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 491; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_6);
  __Pyx_GIVEREF(__pyx_t_1);
  PyTuple_SET_ITEM(__pyx_t_6, 0, __pyx_t_1);
  __Pyx_GIVEREF(__pyx_t_2);
  PyTuple_SET_ITEM(__pyx_t_6, 1, __pyx_t_2);
  __Pyx_GIVEREF(__pyx_t_3);
  PyTuple_SET_ITEM(__pyx_t_6, 2, __pyx_t_3);
  __Pyx_GIVEREF(__pyx_t_4);
  PyTuple_SET_ITEM(__pyx_t_6, 3, __pyx_t_4);
  __Pyx_GIVEREF(__pyx_t_5);
  PyTuple_SET_ITEM(__pyx_t_6, 4, __pyx_t_5);
  __pyx_t_1 = 0;
  __pyx_t_2 = 0;
  __pyx_t_3 = 0;
  __pyx_t_4 = 0;
  __pyx_t_5 = 0;
  __pyx_t_5 = __Pyx_PyString_Format(__pyx_kp_s_s_s_s_s_d, __pyx_t_6); if (unlikely(!__pyx_t_5)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 491; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_5);
  __Pyx_DECREF(__pyx_t_6); __pyx_t_6 = 0;
  __pyx_v_kkey = ((PyObject*)__pyx_t_5);
  __pyx_t_5 = 0;

  /* "kstreamc.pyx":496
 *         # lookup for resolved
 *         # kernel event types
 *         if kkey in self.ketypes:             # <<<<<<<<<<<<<<
 *             return self.ketypes[kkey]
 *         else:
 */
  __pyx_t_7 = (__Pyx_PySequence_ContainsTF(__pyx_v_kkey, __pyx_v_self->ketypes, Py_EQ)); if (unlikely(__pyx_t_7 < 0)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 496; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __pyx_t_8 = (__pyx_t_7 != 0);
  if (__pyx_t_8) {

    /* "kstreamc.pyx":497
 *         # kernel event types
 *         if kkey in self.ketypes:
 *             return self.ketypes[kkey]             # <<<<<<<<<<<<<<
 *         else:
 *             # after the `StringFromGUID2` has been called,
 */
    __Pyx_XDECREF(__pyx_r);
    __pyx_t_5 = PyObject_GetItem(__pyx_v_self->ketypes, __pyx_v_kkey); if (unlikely(__pyx_t_5 == NULL)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 497; __pyx_clineno = __LINE__; goto __pyx_L1_error;};
    __Pyx_GOTREF(__pyx_t_5);
    __pyx_r = __pyx_t_5;
    __pyx_t_5 = 0;
    goto __pyx_L0;

    /* "kstreamc.pyx":496
 *         # lookup for resolved
 *         # kernel event types
 *         if kkey in self.ketypes:             # <<<<<<<<<<<<<<
 *             return self.ketypes[kkey]
 *         else:
 */
  }

  /* "kstreamc.pyx":502
 *             # the `buf` should contain a GUID null terminated string
 *             # including the enclosing braces
 *             chars = StringFromGUID2(&guid, buf, GUID_LEN)             # <<<<<<<<<<<<<<
 *             if chars < 0:
 *                 # the buffer is too small
 */
  /*else*/ {
    __pyx_v_chars = StringFromGUID2((&__pyx_v_guid), __pyx_v_buf, __pyx_e_8kstreamc_GUID_LEN);

    /* "kstreamc.pyx":503
 *             # including the enclosing braces
 *             chars = StringFromGUID2(&guid, buf, GUID_LEN)
 *             if chars < 0:             # <<<<<<<<<<<<<<
 *                 # the buffer is too small
 *                 return None
 */
    __pyx_t_8 = ((__pyx_v_chars < 0) != 0);
    if (__pyx_t_8) {

      /* "kstreamc.pyx":505
 *             if chars < 0:
 *                 # the buffer is too small
 *                 return None             # <<<<<<<<<<<<<<
 *             pystr = <object> PyUnicode_FromWideChar(buf, GUID_LEN)
 *             # remove the braces/null terminator
 */
      __Pyx_XDECREF(__pyx_r);
      __Pyx_INCREF(Py_None);
      __pyx_r = Py_None;
      goto __pyx_L0;

      /* "kstreamc.pyx":503
 *             # including the enclosing braces
 *             chars = StringFromGUID2(&guid, buf, GUID_LEN)
 *             if chars < 0:             # <<<<<<<<<<<<<<
 *                 # the buffer is too small
 *                 return None
 */
    }

    /* "kstreamc.pyx":506
 *                 # the buffer is too small
 *                 return None
 *             pystr = <object> PyUnicode_FromWideChar(buf, GUID_LEN)             # <<<<<<<<<<<<<<
 *             # remove the braces/null terminator
 *             # from the GUID string
 */
    __pyx_t_9 = PyUnicode_FromWideChar(__pyx_v_buf, __pyx_e_8kstreamc_GUID_LEN);
    __pyx_t_5 = ((PyObject *)__pyx_t_9);
    __Pyx_INCREF(__pyx_t_5);
    __pyx_v_pystr = __pyx_t_5;
    __pyx_t_5 = 0;

    /* "kstreamc.pyx":509
 *             # remove the braces/null terminator
 *             # from the GUID string
 *             pystr = pystr[1:-2].lower()             # <<<<<<<<<<<<<<
 *             self.ketypes[kkey] = pystr, opcode
 *             return pystr, opcode
 */
    __pyx_t_6 = __Pyx_PyObject_GetSlice(__pyx_v_pystr, 1, -2L, NULL, NULL, &__pyx_slice__8, 1, 1, 1); if (unlikely(!__pyx_t_6)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 509; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    __Pyx_GOTREF(__pyx_t_6);
    __pyx_t_4 = __Pyx_PyObject_GetAttrStr(__pyx_t_6, __pyx_n_s_lower); if (unlikely(!__pyx_t_4)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 509; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    __Pyx_GOTREF(__pyx_t_4);
    __Pyx_DECREF(__pyx_t_6); __pyx_t_6 = 0;
    __pyx_t_6 = NULL;
    if (CYTHON_COMPILING_IN_CPYTHON && likely(PyMethod_Check(__pyx_t_4))) {
      __pyx_t_6 = PyMethod_GET_SELF(__pyx_t_4);
      if (likely(__pyx_t_6)) {
        PyObject* function = PyMethod_GET_FUNCTION(__pyx_t_4);
        __Pyx_INCREF(__pyx_t_6);
        __Pyx_INCREF(function);
        __Pyx_DECREF_SET(__pyx_t_4, function);
      }
    }
    if (__pyx_t_6) {
      __pyx_t_5 = __Pyx_PyObject_CallOneArg(__pyx_t_4, __pyx_t_6); if (unlikely(!__pyx_t_5)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 509; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
      __Pyx_DECREF(__pyx_t_6); __pyx_t_6 = 0;
    } else {
      __pyx_t_5 = __Pyx_PyObject_CallNoArg(__pyx_t_4); if (unlikely(!__pyx_t_5)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 509; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    }
    __Pyx_GOTREF(__pyx_t_5);
    __Pyx_DECREF(__pyx_t_4); __pyx_t_4 = 0;
    __Pyx_DECREF_SET(__pyx_v_pystr, __pyx_t_5);
    __pyx_t_5 = 0;

    /* "kstreamc.pyx":510
 *             # from the GUID string
 *             pystr = pystr[1:-2].lower()
 *             self.ketypes[kkey] = pystr, opcode             # <<<<<<<<<<<<<<
 *             return pystr, opcode
 * 
 */
    __pyx_t_5 = __Pyx_PyInt_From_UCHAR(__pyx_v_opcode); if (unlikely(!__pyx_t_5)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 510; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    __Pyx_GOTREF(__pyx_t_5);
    __pyx_t_4 = PyTuple_New(2); if (unlikely(!__pyx_t_4)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 510; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    __Pyx_GOTREF(__pyx_t_4);
    __Pyx_INCREF(__pyx_v_pystr);
    __Pyx_GIVEREF(__pyx_v_pystr);
    PyTuple_SET_ITEM(__pyx_t_4, 0, __pyx_v_pystr);
    __Pyx_GIVEREF(__pyx_t_5);
    PyTuple_SET_ITEM(__pyx_t_4, 1, __pyx_t_5);
    __pyx_t_5 = 0;
    if (unlikely(PyObject_SetItem(__pyx_v_self->ketypes, __pyx_v_kkey, __pyx_t_4) < 0)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 510; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    __Pyx_DECREF(__pyx_t_4); __pyx_t_4 = 0;

    /* "kstreamc.pyx":511
 *             pystr = pystr[1:-2].lower()
 *             self.ketypes[kkey] = pystr, opcode
 *             return pystr, opcode             # <<<<<<<<<<<<<<
 * 
 *     cdef _filetime_to_systime(self, EVENT_HEADER kevt_header):
 */
    __Pyx_XDECREF(__pyx_r);
    __pyx_t_4 = __Pyx_PyInt_From_UCHAR(__pyx_v_opcode); if (unlikely(!__pyx_t_4)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 511; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    __Pyx_GOTREF(__pyx_t_4);
    __pyx_t_5 = PyTuple_New(2); if (unlikely(!__pyx_t_5)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 511; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    __Pyx_GOTREF(__pyx_t_5);
    __Pyx_INCREF(__pyx_v_pystr);
    __Pyx_GIVEREF(__pyx_v_pystr);
    PyTuple_SET_ITEM(__pyx_t_5, 0, __pyx_v_pystr);
    __Pyx_GIVEREF(__pyx_t_4);
    PyTuple_SET_ITEM(__pyx_t_5, 1, __pyx_t_4);
    __pyx_t_4 = 0;
    __pyx_r = __pyx_t_5;
    __pyx_t_5 = 0;
    goto __pyx_L0;
  }

  /* "kstreamc.pyx":472
 *             return 'unknown'
 * 
 *     cdef _assemble_type(self, GUID guid, UCHAR opcode):             # <<<<<<<<<<<<<<
 *         """Packs an event type into tuple.
 * 
 */

  /* function exit code */
  __pyx_L1_error:;
  __Pyx_XDECREF(__pyx_t_1);
  __Pyx_XDECREF(__pyx_t_2);
  __Pyx_XDECREF(__pyx_t_3);
  __Pyx_XDECREF(__pyx_t_4);
  __Pyx_XDECREF(__pyx_t_5);
  __Pyx_XDECREF(__pyx_t_6);
  __Pyx_AddTraceback("kstreamc.KEventStreamCollector._assemble_type", __pyx_clineno, __pyx_lineno, __pyx_filename);
  __pyx_r = 0;
  __pyx_L0:;
  __Pyx_XDECREF(__pyx_v_kkey);
  __Pyx_XDECREF(__pyx_v_pystr);
  __Pyx_XGIVEREF(__pyx_r);
  __Pyx_RefNannyFinishContext();
  return __pyx_r;
}

/* "kstreamc.pyx":513
 *             return pystr, opcode
 * 
 *     cdef _filetime_to_systime(self, EVENT_HEADER kevt_header):             # <<<<<<<<<<<<<<
 *         """Converts kernel event timestamp.
 * 
 */

static PyObject *__pyx_f_8kstreamc_21KEventStreamCollector__filetime_to_systime(CYTHON_UNUSED struct __pyx_obj_8kstreamc_KEventStreamCollector *__pyx_v_self, EVENT_HEADER __pyx_v_kevt_header) {
  FILETIME __pyx_v_filet;
  SYSTEMTIME __pyx_v_syst;
  SYSTEMTIME __pyx_v_tzt;
  PyObject *__pyx_r = NULL;
  __Pyx_RefNannyDeclarations
  LONG __pyx_t_1;
  DWORD __pyx_t_2;
  PyObject *__pyx_t_3 = NULL;
  PyObject *__pyx_t_4 = NULL;
  PyObject *__pyx_t_5 = NULL;
  PyObject *__pyx_t_6 = NULL;
  PyObject *__pyx_t_7 = NULL;
  int __pyx_lineno = 0;
  const char *__pyx_filename = NULL;
  int __pyx_clineno = 0;
  __Pyx_RefNannySetupContext("_filetime_to_systime", 0);

  /* "kstreamc.pyx":530
 *         cdef SYSTEMTIME tzt
 * 
 *         filet.dwHighDateTime = kevt_header.TimeStamp.HighPart             # <<<<<<<<<<<<<<
 *         filet.dwLowDateTime = kevt_header.TimeStamp.LowPart
 * 
 */
  __pyx_t_1 = __pyx_v_kevt_header.TimeStamp.HighPart;
  __pyx_v_filet.dwHighDateTime = __pyx_t_1;

  /* "kstreamc.pyx":531
 * 
 *         filet.dwHighDateTime = kevt_header.TimeStamp.HighPart
 *         filet.dwLowDateTime = kevt_header.TimeStamp.LowPart             # <<<<<<<<<<<<<<
 * 
 *         # convert to currently active
 */
  __pyx_t_2 = __pyx_v_kevt_header.TimeStamp.LowPart;
  __pyx_v_filet.dwLowDateTime = __pyx_t_2;

  /* "kstreamc.pyx":535
 *         # convert to currently active
 *         # time zone local date and time format
 *         FileTimeToSystemTime(&filet, &syst)             # <<<<<<<<<<<<<<
 *         SystemTimeToTzSpecificLocalTime(NULL,
 *                                         &syst,
 */
  FileTimeToSystemTime((&__pyx_v_filet), (&__pyx_v_syst));

  /* "kstreamc.pyx":536
 *         # time zone local date and time format
 *         FileTimeToSystemTime(&filet, &syst)
 *         SystemTimeToTzSpecificLocalTime(NULL,             # <<<<<<<<<<<<<<
 *                                         &syst,
 *                                         &tzt)
 */
  SystemTimeToTzSpecificLocalTime(NULL, (&__pyx_v_syst), (&__pyx_v_tzt));

  /* "kstreamc.pyx":539
 *                                         &syst,
 *                                         &tzt)
 *         return '%d:%02d:%02d.%d' % (tzt.wHour, tzt.wMinute,             # <<<<<<<<<<<<<<
 *                                     tzt.wSecond,
 *                                     tzt.wMilliseconds)
 */
  __Pyx_XDECREF(__pyx_r);
  __pyx_t_3 = __Pyx_PyInt_From_WORD(__pyx_v_tzt.wHour); if (unlikely(!__pyx_t_3)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 539; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_3);
  __pyx_t_4 = __Pyx_PyInt_From_WORD(__pyx_v_tzt.wMinute); if (unlikely(!__pyx_t_4)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 539; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_4);

  /* "kstreamc.pyx":540
 *                                         &tzt)
 *         return '%d:%02d:%02d.%d' % (tzt.wHour, tzt.wMinute,
 *                                     tzt.wSecond,             # <<<<<<<<<<<<<<
 *                                     tzt.wMilliseconds)
 * 
 */
  __pyx_t_5 = __Pyx_PyInt_From_WORD(__pyx_v_tzt.wSecond); if (unlikely(!__pyx_t_5)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 540; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_5);

  /* "kstreamc.pyx":541
 *         return '%d:%02d:%02d.%d' % (tzt.wHour, tzt.wMinute,
 *                                     tzt.wSecond,
 *                                     tzt.wMilliseconds)             # <<<<<<<<<<<<<<
 * 
 *     cdef _exclude_kevent(self, pid, tid):
 */
  __pyx_t_6 = __Pyx_PyInt_From_WORD(__pyx_v_tzt.wMilliseconds); if (unlikely(!__pyx_t_6)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 541; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_6);

  /* "kstreamc.pyx":539
 *                                         &syst,
 *                                         &tzt)
 *         return '%d:%02d:%02d.%d' % (tzt.wHour, tzt.wMinute,             # <<<<<<<<<<<<<<
 *                                     tzt.wSecond,
 *                                     tzt.wMilliseconds)
 */
  __pyx_t_7 = PyTuple_New(4); if (unlikely(!__pyx_t_7)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 539; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_7);
  __Pyx_GIVEREF(__pyx_t_3);
  PyTuple_SET_ITEM(__pyx_t_7, 0, __pyx_t_3);
  __Pyx_GIVEREF(__pyx_t_4);
  PyTuple_SET_ITEM(__pyx_t_7, 1, __pyx_t_4);
  __Pyx_GIVEREF(__pyx_t_5);
  PyTuple_SET_ITEM(__pyx_t_7, 2, __pyx_t_5);
  __Pyx_GIVEREF(__pyx_t_6);
  PyTuple_SET_ITEM(__pyx_t_7, 3, __pyx_t_6);
  __pyx_t_3 = 0;
  __pyx_t_4 = 0;
  __pyx_t_5 = 0;
  __pyx_t_6 = 0;
  __pyx_t_6 = __Pyx_PyString_Format(__pyx_kp_s_d_02d_02d_d, __pyx_t_7); if (unlikely(!__pyx_t_6)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 539; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_6);
  __Pyx_DECREF(__pyx_t_7); __pyx_t_7 = 0;
  __pyx_r = __pyx_t_6;
  __pyx_t_6 = 0;
  goto __pyx_L0;

  /* "kstreamc.pyx":513
 *             return pystr, opcode
 * 
 *     cdef _filetime_to_systime(self, EVENT_HEADER kevt_header):             # <<<<<<<<<<<<<<
 *         """Converts kernel event timestamp.
 * 
 */

  /* function exit code */
  __pyx_L1_error:;
  __Pyx_XDECREF(__pyx_t_3);
  __Pyx_XDECREF(__pyx_t_4);
  __Pyx_XDECREF(__pyx_t_5);
  __Pyx_XDECREF(__pyx_t_6);
  __Pyx_XDECREF(__pyx_t_7);
  __Pyx_AddTraceback("kstreamc.KEventStreamCollector._filetime_to_systime", __pyx_clineno, __pyx_lineno, __pyx_filename);
  __pyx_r = 0;
  __pyx_L0:;
  __Pyx_XGIVEREF(__pyx_r);
  __Pyx_RefNannyFinishContext();
  return __pyx_r;
}

/* "kstreamc.pyx":543
 *                                     tzt.wMilliseconds)
 * 
 *     cdef _exclude_kevent(self, pid, tid):             # <<<<<<<<<<<<<<
 *         """Excludes the kernel event from the pid or tid
 * 
 */

static PyObject *__pyx_f_8kstreamc_21KEventStreamCollector__exclude_kevent(struct __pyx_obj_8kstreamc_KEventStreamCollector *__pyx_v_self, PyObject *__pyx_v_pid, PyObject *__pyx_v_tid) {
  PyObject *__pyx_v_thread = NULL;
  PyObject *__pyx_r = NULL;
  __Pyx_RefNannyDeclarations
  PyObject *__pyx_t_1 = NULL;
  Py_ssize_t __pyx_t_2;
  int __pyx_t_3;
  PyObject *__pyx_t_4 = NULL;
  PyObject *__pyx_t_5 = NULL;
  PyObject *__pyx_t_6 = NULL;
  PyObject *__pyx_t_7 = NULL;
  int __pyx_t_8;
  int __pyx_t_9;
  int __pyx_lineno = 0;
  const char *__pyx_filename = NULL;
  int __pyx_clineno = 0;
  __Pyx_RefNannySetupContext("_exclude_kevent", 0);

  /* "kstreamc.pyx":555
 * 
 *        """
 *         if len(self._excluded_procs) == 0:             # <<<<<<<<<<<<<<
 *             return False
 *         thread = self.thread_registry.get_thread(pid) or \
 */
  __pyx_t_1 = __pyx_v_self->_excluded_procs;
  __Pyx_INCREF(__pyx_t_1);
  __pyx_t_2 = PyObject_Length(__pyx_t_1); if (unlikely(__pyx_t_2 == -1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 555; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0;
  __pyx_t_3 = ((__pyx_t_2 == 0) != 0);
  if (__pyx_t_3) {

    /* "kstreamc.pyx":556
 *        """
 *         if len(self._excluded_procs) == 0:
 *             return False             # <<<<<<<<<<<<<<
 *         thread = self.thread_registry.get_thread(pid) or \
 *                  self.thread_registry.get_thread(tid)
 */
    __Pyx_XDECREF(__pyx_r);
    __Pyx_INCREF(Py_False);
    __pyx_r = Py_False;
    goto __pyx_L0;

    /* "kstreamc.pyx":555
 * 
 *        """
 *         if len(self._excluded_procs) == 0:             # <<<<<<<<<<<<<<
 *             return False
 *         thread = self.thread_registry.get_thread(pid) or \
 */
  }

  /* "kstreamc.pyx":557
 *         if len(self._excluded_procs) == 0:
 *             return False
 *         thread = self.thread_registry.get_thread(pid) or \             # <<<<<<<<<<<<<<
 *                  self.thread_registry.get_thread(tid)
 *         return True if thread and thread.name \
 */
  __pyx_t_5 = __Pyx_PyObject_GetAttrStr(__pyx_v_self->thread_registry, __pyx_n_s_get_thread); if (unlikely(!__pyx_t_5)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 557; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_5);
  __pyx_t_6 = NULL;
  if (CYTHON_COMPILING_IN_CPYTHON && likely(PyMethod_Check(__pyx_t_5))) {
    __pyx_t_6 = PyMethod_GET_SELF(__pyx_t_5);
    if (likely(__pyx_t_6)) {
      PyObject* function = PyMethod_GET_FUNCTION(__pyx_t_5);
      __Pyx_INCREF(__pyx_t_6);
      __Pyx_INCREF(function);
      __Pyx_DECREF_SET(__pyx_t_5, function);
    }
  }
  if (!__pyx_t_6) {
    __pyx_t_4 = __Pyx_PyObject_CallOneArg(__pyx_t_5, __pyx_v_pid); if (unlikely(!__pyx_t_4)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 557; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    __Pyx_GOTREF(__pyx_t_4);
  } else {
    __pyx_t_7 = PyTuple_New(1+1); if (unlikely(!__pyx_t_7)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 557; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    __Pyx_GOTREF(__pyx_t_7);
    __Pyx_GIVEREF(__pyx_t_6); PyTuple_SET_ITEM(__pyx_t_7, 0, __pyx_t_6); __pyx_t_6 = NULL;
    __Pyx_INCREF(__pyx_v_pid);
    __Pyx_GIVEREF(__pyx_v_pid);
    PyTuple_SET_ITEM(__pyx_t_7, 0+1, __pyx_v_pid);
    __pyx_t_4 = __Pyx_PyObject_Call(__pyx_t_5, __pyx_t_7, NULL); if (unlikely(!__pyx_t_4)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 557; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    __Pyx_GOTREF(__pyx_t_4);
    __Pyx_DECREF(__pyx_t_7); __pyx_t_7 = 0;
  }
  __Pyx_DECREF(__pyx_t_5); __pyx_t_5 = 0;
  __pyx_t_3 = __Pyx_PyObject_IsTrue(__pyx_t_4); if (unlikely(__pyx_t_3 < 0)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 557; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  if (!__pyx_t_3) {
    __Pyx_DECREF(__pyx_t_4); __pyx_t_4 = 0;
  } else {
    __Pyx_INCREF(__pyx_t_4);
    __pyx_t_1 = __pyx_t_4;
    __Pyx_DECREF(__pyx_t_4); __pyx_t_4 = 0;
    goto __pyx_L4_bool_binop_done;
  }

  /* "kstreamc.pyx":558
 *             return False
 *         thread = self.thread_registry.get_thread(pid) or \
 *                  self.thread_registry.get_thread(tid)             # <<<<<<<<<<<<<<
 *         return True if thread and thread.name \
 *                                   in self._excluded_procs else False
 */
  __pyx_t_5 = __Pyx_PyObject_GetAttrStr(__pyx_v_self->thread_registry, __pyx_n_s_get_thread); if (unlikely(!__pyx_t_5)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 558; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_5);
  __pyx_t_7 = NULL;
  if (CYTHON_COMPILING_IN_CPYTHON && likely(PyMethod_Check(__pyx_t_5))) {
    __pyx_t_7 = PyMethod_GET_SELF(__pyx_t_5);
    if (likely(__pyx_t_7)) {
      PyObject* function = PyMethod_GET_FUNCTION(__pyx_t_5);
      __Pyx_INCREF(__pyx_t_7);
      __Pyx_INCREF(function);
      __Pyx_DECREF_SET(__pyx_t_5, function);
    }
  }
  if (!__pyx_t_7) {
    __pyx_t_4 = __Pyx_PyObject_CallOneArg(__pyx_t_5, __pyx_v_tid); if (unlikely(!__pyx_t_4)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 558; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    __Pyx_GOTREF(__pyx_t_4);
  } else {
    __pyx_t_6 = PyTuple_New(1+1); if (unlikely(!__pyx_t_6)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 558; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    __Pyx_GOTREF(__pyx_t_6);
    __Pyx_GIVEREF(__pyx_t_7); PyTuple_SET_ITEM(__pyx_t_6, 0, __pyx_t_7); __pyx_t_7 = NULL;
    __Pyx_INCREF(__pyx_v_tid);
    __Pyx_GIVEREF(__pyx_v_tid);
    PyTuple_SET_ITEM(__pyx_t_6, 0+1, __pyx_v_tid);
    __pyx_t_4 = __Pyx_PyObject_Call(__pyx_t_5, __pyx_t_6, NULL); if (unlikely(!__pyx_t_4)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 558; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    __Pyx_GOTREF(__pyx_t_4);
    __Pyx_DECREF(__pyx_t_6); __pyx_t_6 = 0;
  }
  __Pyx_DECREF(__pyx_t_5); __pyx_t_5 = 0;
  __Pyx_INCREF(__pyx_t_4);
  __pyx_t_1 = __pyx_t_4;
  __Pyx_DECREF(__pyx_t_4); __pyx_t_4 = 0;
  __pyx_L4_bool_binop_done:;
  __pyx_v_thread = __pyx_t_1;
  __pyx_t_1 = 0;

  /* "kstreamc.pyx":559
 *         thread = self.thread_registry.get_thread(pid) or \
 *                  self.thread_registry.get_thread(tid)
 *         return True if thread and thread.name \             # <<<<<<<<<<<<<<
 *                                   in self._excluded_procs else False
 * 
 */
  __Pyx_XDECREF(__pyx_r);
  __pyx_t_8 = __Pyx_PyObject_IsTrue(__pyx_v_thread); if (unlikely(__pyx_t_8 < 0)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 559; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  if (__pyx_t_8) {
  } else {
    __pyx_t_3 = __pyx_t_8;
    goto __pyx_L6_bool_binop_done;
  }

  /* "kstreamc.pyx":560
 *                  self.thread_registry.get_thread(tid)
 *         return True if thread and thread.name \
 *                                   in self._excluded_procs else False             # <<<<<<<<<<<<<<
 * 
 *     cdef _aggregate_info(self, EVENT_RECORD* kevent_trace, kevt_type, params):
 */
  __pyx_t_4 = __Pyx_PyObject_GetAttrStr(__pyx_v_thread, __pyx_n_s_name_2); if (unlikely(!__pyx_t_4)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 559; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_4);
  __pyx_t_8 = (__Pyx_PySequence_ContainsTF(__pyx_t_4, __pyx_v_self->_excluded_procs, Py_EQ)); if (unlikely(__pyx_t_8 < 0)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 560; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_DECREF(__pyx_t_4); __pyx_t_4 = 0;
  __pyx_t_9 = (__pyx_t_8 != 0);
  __pyx_t_3 = __pyx_t_9;
  __pyx_L6_bool_binop_done:;
  if (__pyx_t_3) {

    /* "kstreamc.pyx":559
 *         thread = self.thread_registry.get_thread(pid) or \
 *                  self.thread_registry.get_thread(tid)
 *         return True if thread and thread.name \             # <<<<<<<<<<<<<<
 *                                   in self._excluded_procs else False
 * 
 */
    __Pyx_INCREF(Py_True);
    __pyx_t_1 = Py_True;
  } else {

    /* "kstreamc.pyx":560
 *                  self.thread_registry.get_thread(tid)
 *         return True if thread and thread.name \
 *                                   in self._excluded_procs else False             # <<<<<<<<<<<<<<
 * 
 *     cdef _aggregate_info(self, EVENT_RECORD* kevent_trace, kevt_type, params):
 */
    __Pyx_INCREF(Py_False);
    __pyx_t_1 = Py_False;
  }
  __pyx_r = __pyx_t_1;
  __pyx_t_1 = 0;
  goto __pyx_L0;

  /* "kstreamc.pyx":543
 *                                     tzt.wMilliseconds)
 * 
 *     cdef _exclude_kevent(self, pid, tid):             # <<<<<<<<<<<<<<
 *         """Excludes the kernel event from the pid or tid
 * 
 */

  /* function exit code */
  __pyx_L1_error:;
  __Pyx_XDECREF(__pyx_t_1);
  __Pyx_XDECREF(__pyx_t_4);
  __Pyx_XDECREF(__pyx_t_5);
  __Pyx_XDECREF(__pyx_t_6);
  __Pyx_XDECREF(__pyx_t_7);
  __Pyx_AddTraceback("kstreamc.KEventStreamCollector._exclude_kevent", __pyx_clineno, __pyx_lineno, __pyx_filename);
  __pyx_r = 0;
  __pyx_L0:;
  __Pyx_XDECREF(__pyx_v_thread);
  __Pyx_XGIVEREF(__pyx_r);
  __Pyx_RefNannyFinishContext();
  return __pyx_r;
}

/* "kstreamc.pyx":562
 *                                   in self._excluded_procs else False
 * 
 *     cdef _aggregate_info(self, EVENT_RECORD* kevent_trace, kevt_type, params):             # <<<<<<<<<<<<<<
 *         if REGISTRY_KEVENT_GUID == kevt_type[0]:
 *             # registry events have a valid process/thread
 */

static PyObject *__pyx_f_8kstreamc_21KEventStreamCollector__aggregate_info(CYTHON_UNUSED struct __pyx_obj_8kstreamc_KEventStreamCollector *__pyx_v_self, EVENT_RECORD *__pyx_v_kevent_trace, PyObject *__pyx_v_kevt_type, PyObject *__pyx_v_params) {
  PyObject *__pyx_r = NULL;
  __Pyx_RefNannyDeclarations
  PyObject *__pyx_t_1 = NULL;
  PyObject *__pyx_t_2 = NULL;
  PyObject *__pyx_t_3 = NULL;
  int __pyx_t_4;
  int __pyx_lineno = 0;
  const char *__pyx_filename = NULL;
  int __pyx_clineno = 0;
  __Pyx_RefNannySetupContext("_aggregate_info", 0);

  /* "kstreamc.pyx":563
 * 
 *     cdef _aggregate_info(self, EVENT_RECORD* kevent_trace, kevt_type, params):
 *         if REGISTRY_KEVENT_GUID == kevt_type[0]:             # <<<<<<<<<<<<<<
 *             # registry events have a valid process/thread
 *             # id in the event header.
 */
  __pyx_t_1 = __Pyx_GetModuleGlobalName(__pyx_n_s_REGISTRY_KEVENT_GUID); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 563; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_1);
  __pyx_t_2 = __Pyx_GetItemInt(__pyx_v_kevt_type, 0, long, 1, __Pyx_PyInt_From_long, 0, 0, 1); if (unlikely(__pyx_t_2 == NULL)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 563; __pyx_clineno = __LINE__; goto __pyx_L1_error;};
  __Pyx_GOTREF(__pyx_t_2);
  __pyx_t_3 = PyObject_RichCompare(__pyx_t_1, __pyx_t_2, Py_EQ); __Pyx_XGOTREF(__pyx_t_3); if (unlikely(!__pyx_t_3)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 563; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0;
  __Pyx_DECREF(__pyx_t_2); __pyx_t_2 = 0;
  __pyx_t_4 = __Pyx_PyObject_IsTrue(__pyx_t_3); if (unlikely(__pyx_t_4 < 0)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 563; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_DECREF(__pyx_t_3); __pyx_t_3 = 0;
  if (__pyx_t_4) {

    /* "kstreamc.pyx":567
 *             # id in the event header.
 *             # Aggregate them to event payload
 *             params[TID_PARAM_NAME] = <ULONG> kevent_trace.EventHeader.ThreadId             # <<<<<<<<<<<<<<
 *             params[PID_PARAM_NAME] = <ULONG> kevent_trace.EventHeader.ProcessId
 * 
 */
    __pyx_t_3 = __Pyx_PyInt_From_ULONG(((ULONG)__pyx_v_kevent_trace->EventHeader.ThreadId)); if (unlikely(!__pyx_t_3)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 567; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    __Pyx_GOTREF(__pyx_t_3);
    __pyx_t_2 = __Pyx_GetModuleGlobalName(__pyx_n_s_TID_PARAM_NAME); if (unlikely(!__pyx_t_2)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 567; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    __Pyx_GOTREF(__pyx_t_2);
    if (unlikely(PyObject_SetItem(__pyx_v_params, __pyx_t_2, __pyx_t_3) < 0)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 567; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    __Pyx_DECREF(__pyx_t_2); __pyx_t_2 = 0;
    __Pyx_DECREF(__pyx_t_3); __pyx_t_3 = 0;

    /* "kstreamc.pyx":568
 *             # Aggregate them to event payload
 *             params[TID_PARAM_NAME] = <ULONG> kevent_trace.EventHeader.ThreadId
 *             params[PID_PARAM_NAME] = <ULONG> kevent_trace.EventHeader.ProcessId             # <<<<<<<<<<<<<<
 * 
 */
    __pyx_t_3 = __Pyx_PyInt_From_ULONG(((ULONG)__pyx_v_kevent_trace->EventHeader.ProcessId)); if (unlikely(!__pyx_t_3)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 568; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    __Pyx_GOTREF(__pyx_t_3);
    __pyx_t_2 = __Pyx_GetModuleGlobalName(__pyx_n_s_PID_PARAM_NAME); if (unlikely(!__pyx_t_2)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 568; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    __Pyx_GOTREF(__pyx_t_2);
    if (unlikely(PyObject_SetItem(__pyx_v_params, __pyx_t_2, __pyx_t_3) < 0)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 568; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    __Pyx_DECREF(__pyx_t_2); __pyx_t_2 = 0;
    __Pyx_DECREF(__pyx_t_3); __pyx_t_3 = 0;

    /* "kstreamc.pyx":563
 * 
 *     cdef _aggregate_info(self, EVENT_RECORD* kevent_trace, kevt_type, params):
 *         if REGISTRY_KEVENT_GUID == kevt_type[0]:             # <<<<<<<<<<<<<<
 *             # registry events have a valid process/thread
 *             # id in the event header.
 */
  }

  /* "kstreamc.pyx":562
 *                                   in self._excluded_procs else False
 * 
 *     cdef _aggregate_info(self, EVENT_RECORD* kevent_trace, kevt_type, params):             # <<<<<<<<<<<<<<
 *         if REGISTRY_KEVENT_GUID == kevt_type[0]:
 *             # registry events have a valid process/thread
 */

  /* function exit code */
  __pyx_r = Py_None; __Pyx_INCREF(Py_None);
  goto __pyx_L0;
  __pyx_L1_error:;
  __Pyx_XDECREF(__pyx_t_1);
  __Pyx_XDECREF(__pyx_t_2);
  __Pyx_XDECREF(__pyx_t_3);
  __Pyx_AddTraceback("kstreamc.KEventStreamCollector._aggregate_info", __pyx_clineno, __pyx_lineno, __pyx_filename);
  __pyx_r = 0;
  __pyx_L0:;
  __Pyx_XGIVEREF(__pyx_r);
  __Pyx_RefNannyFinishContext();
  return __pyx_r;
}
static struct __pyx_vtabstruct_8kstreamc_KEventStreamCollector __pyx_vtable_8kstreamc_KEventStreamCollector;

static PyObject *__pyx_tp_new_8kstreamc_KEventStreamCollector(PyTypeObject *t, CYTHON_UNUSED PyObject *a, CYTHON_UNUSED PyObject *k) {
  struct __pyx_obj_8kstreamc_KEventStreamCollector *p;
  PyObject *o;
  if (likely((t->tp_flags & Py_TPFLAGS_IS_ABSTRACT) == 0)) {
    o = (*t->tp_alloc)(t, 0);
  } else {
    o = (PyObject *) PyBaseObject_Type.tp_new(t, __pyx_empty_tuple, 0);
  }
  if (unlikely(!o)) return 0;
  p = ((struct __pyx_obj_8kstreamc_KEventStreamCollector *)o);
  p->__pyx_vtab = __pyx_vtabptr_8kstreamc_KEventStreamCollector;
  p->next_kevt_callback = Py_None; Py_INCREF(Py_None);
  p->on_kstream_open_callback = Py_None; Py_INCREF(Py_None);
  p->klogger = Py_None; Py_INCREF(Py_None);
  p->pointer_size = Py_None; Py_INCREF(Py_None);
  p->property_regex = Py_None; Py_INCREF(Py_None);
  p->ketypes = Py_None; Py_INCREF(Py_None);
  p->own_pid = Py_None; Py_INCREF(Py_None);
  p->kefilters = Py_None; Py_INCREF(Py_None);
  p->exclude_pid_props = Py_None; Py_INCREF(Py_None);
  p->exclude_from_filters = Py_None; Py_INCREF(Py_None);
  p->logger = Py_None; Py_INCREF(Py_None);
  p->file_handler = Py_None; Py_INCREF(Py_None);
  p->interrupted = Py_None; Py_INCREF(Py_None);
  p->thread_registry = Py_None; Py_INCREF(Py_None);
  p->_filters = Py_None; Py_INCREF(Py_None);
  p->_excluded_procs = Py_None; Py_INCREF(Py_None);
  return o;
}

static void __pyx_tp_dealloc_8kstreamc_KEventStreamCollector(PyObject *o) {
  struct __pyx_obj_8kstreamc_KEventStreamCollector *p = (struct __pyx_obj_8kstreamc_KEventStreamCollector *)o;
  #if PY_VERSION_HEX >= 0x030400a1
  if (unlikely(Py_TYPE(o)->tp_finalize) && !_PyGC_FINALIZED(o)) {
    if (PyObject_CallFinalizerFromDealloc(o)) return;
  }
  #endif
  PyObject_GC_UnTrack(o);
  Py_CLEAR(p->next_kevt_callback);
  Py_CLEAR(p->on_kstream_open_callback);
  Py_CLEAR(p->klogger);
  Py_CLEAR(p->pointer_size);
  Py_CLEAR(p->property_regex);
  Py_CLEAR(p->ketypes);
  Py_CLEAR(p->own_pid);
  Py_CLEAR(p->kefilters);
  Py_CLEAR(p->exclude_pid_props);
  Py_CLEAR(p->exclude_from_filters);
  Py_CLEAR(p->logger);
  Py_CLEAR(p->file_handler);
  Py_CLEAR(p->interrupted);
  Py_CLEAR(p->thread_registry);
  Py_CLEAR(p->_filters);
  Py_CLEAR(p->_excluded_procs);
  (*Py_TYPE(o)->tp_free)(o);
}

static int __pyx_tp_traverse_8kstreamc_KEventStreamCollector(PyObject *o, visitproc v, void *a) {
  int e;
  struct __pyx_obj_8kstreamc_KEventStreamCollector *p = (struct __pyx_obj_8kstreamc_KEventStreamCollector *)o;
  if (p->next_kevt_callback) {
    e = (*v)(p->next_kevt_callback, a); if (e) return e;
  }
  if (p->on_kstream_open_callback) {
    e = (*v)(p->on_kstream_open_callback, a); if (e) return e;
  }
  if (p->klogger) {
    e = (*v)(p->klogger, a); if (e) return e;
  }
  if (p->pointer_size) {
    e = (*v)(p->pointer_size, a); if (e) return e;
  }
  if (p->property_regex) {
    e = (*v)(p->property_regex, a); if (e) return e;
  }
  if (p->ketypes) {
    e = (*v)(p->ketypes, a); if (e) return e;
  }
  if (p->own_pid) {
    e = (*v)(p->own_pid, a); if (e) return e;
  }
  if (p->kefilters) {
    e = (*v)(p->kefilters, a); if (e) return e;
  }
  if (p->exclude_pid_props) {
    e = (*v)(p->exclude_pid_props, a); if (e) return e;
  }
  if (p->exclude_from_filters) {
    e = (*v)(p->exclude_from_filters, a); if (e) return e;
  }
  if (p->logger) {
    e = (*v)(p->logger, a); if (e) return e;
  }
  if (p->file_handler) {
    e = (*v)(p->file_handler, a); if (e) return e;
  }
  if (p->interrupted) {
    e = (*v)(p->interrupted, a); if (e) return e;
  }
  if (p->thread_registry) {
    e = (*v)(p->thread_registry, a); if (e) return e;
  }
  if (p->_filters) {
    e = (*v)(p->_filters, a); if (e) return e;
  }
  if (p->_excluded_procs) {
    e = (*v)(p->_excluded_procs, a); if (e) return e;
  }
  return 0;
}

static int __pyx_tp_clear_8kstreamc_KEventStreamCollector(PyObject *o) {
  PyObject* tmp;
  struct __pyx_obj_8kstreamc_KEventStreamCollector *p = (struct __pyx_obj_8kstreamc_KEventStreamCollector *)o;
  tmp = ((PyObject*)p->next_kevt_callback);
  p->next_kevt_callback = Py_None; Py_INCREF(Py_None);
  Py_XDECREF(tmp);
  tmp = ((PyObject*)p->on_kstream_open_callback);
  p->on_kstream_open_callback = Py_None; Py_INCREF(Py_None);
  Py_XDECREF(tmp);
  tmp = ((PyObject*)p->klogger);
  p->klogger = Py_None; Py_INCREF(Py_None);
  Py_XDECREF(tmp);
  tmp = ((PyObject*)p->pointer_size);
  p->pointer_size = Py_None; Py_INCREF(Py_None);
  Py_XDECREF(tmp);
  tmp = ((PyObject*)p->property_regex);
  p->property_regex = Py_None; Py_INCREF(Py_None);
  Py_XDECREF(tmp);
  tmp = ((PyObject*)p->ketypes);
  p->ketypes = Py_None; Py_INCREF(Py_None);
  Py_XDECREF(tmp);
  tmp = ((PyObject*)p->own_pid);
  p->own_pid = Py_None; Py_INCREF(Py_None);
  Py_XDECREF(tmp);
  tmp = ((PyObject*)p->kefilters);
  p->kefilters = Py_None; Py_INCREF(Py_None);
  Py_XDECREF(tmp);
  tmp = ((PyObject*)p->exclude_pid_props);
  p->exclude_pid_props = Py_None; Py_INCREF(Py_None);
  Py_XDECREF(tmp);
  tmp = ((PyObject*)p->exclude_from_filters);
  p->exclude_from_filters = Py_None; Py_INCREF(Py_None);
  Py_XDECREF(tmp);
  tmp = ((PyObject*)p->logger);
  p->logger = Py_None; Py_INCREF(Py_None);
  Py_XDECREF(tmp);
  tmp = ((PyObject*)p->file_handler);
  p->file_handler = Py_None; Py_INCREF(Py_None);
  Py_XDECREF(tmp);
  tmp = ((PyObject*)p->interrupted);
  p->interrupted = Py_None; Py_INCREF(Py_None);
  Py_XDECREF(tmp);
  tmp = ((PyObject*)p->thread_registry);
  p->thread_registry = Py_None; Py_INCREF(Py_None);
  Py_XDECREF(tmp);
  tmp = ((PyObject*)p->_filters);
  p->_filters = Py_None; Py_INCREF(Py_None);
  Py_XDECREF(tmp);
  tmp = ((PyObject*)p->_excluded_procs);
  p->_excluded_procs = Py_None; Py_INCREF(Py_None);
  Py_XDECREF(tmp);
  return 0;
}

static PyMethodDef __pyx_methods_8kstreamc_KEventStreamCollector[] = {
  {"open_kstream", (PyCFunction)__pyx_pw_8kstreamc_21KEventStreamCollector_3open_kstream, METH_O, __pyx_doc_8kstreamc_21KEventStreamCollector_2open_kstream},
  {"set_kstream_open_callback", (PyCFunction)__pyx_pw_8kstreamc_21KEventStreamCollector_5set_kstream_open_callback, METH_O, 0},
  {"close_kstream", (PyCFunction)__pyx_pw_8kstreamc_21KEventStreamCollector_7close_kstream, METH_NOARGS, 0},
  {"add_kevent_filter", (PyCFunction)__pyx_pw_8kstreamc_21KEventStreamCollector_9add_kevent_filter, METH_O, 0},
  {"add_pid_filter", (PyCFunction)__pyx_pw_8kstreamc_21KEventStreamCollector_11add_pid_filter, METH_O, 0},
  {"set_excluded_procs", (PyCFunction)__pyx_pw_8kstreamc_21KEventStreamCollector_13set_excluded_procs, METH_O, 0},
  {"clear_kefilters", (PyCFunction)__pyx_pw_8kstreamc_21KEventStreamCollector_15clear_kefilters, METH_NOARGS, 0},
  {0, 0, 0, 0}
};

static PyTypeObject __pyx_type_8kstreamc_KEventStreamCollector = {
  PyVarObject_HEAD_INIT(0, 0)
  "kstreamc.KEventStreamCollector", /*tp_name*/
  sizeof(struct __pyx_obj_8kstreamc_KEventStreamCollector), /*tp_basicsize*/
  0, /*tp_itemsize*/
  __pyx_tp_dealloc_8kstreamc_KEventStreamCollector, /*tp_dealloc*/
  0, /*tp_print*/
  0, /*tp_getattr*/
  0, /*tp_setattr*/
  #if PY_MAJOR_VERSION < 3
  0, /*tp_compare*/
  #endif
  #if PY_MAJOR_VERSION >= 3
  0, /*tp_as_async*/
  #endif
  0, /*tp_repr*/
  0, /*tp_as_number*/
  0, /*tp_as_sequence*/
  0, /*tp_as_mapping*/
  0, /*tp_hash*/
  0, /*tp_call*/
  0, /*tp_str*/
  0, /*tp_getattro*/
  0, /*tp_setattro*/
  0, /*tp_as_buffer*/
  Py_TPFLAGS_DEFAULT|Py_TPFLAGS_HAVE_VERSION_TAG|Py_TPFLAGS_CHECKTYPES|Py_TPFLAGS_HAVE_NEWBUFFER|Py_TPFLAGS_BASETYPE|Py_TPFLAGS_HAVE_GC, /*tp_flags*/
  "Kernel event stream collector.\n\n\n    Collects events the from kernel event stream and invokes\n    a python callback method for each event delivered\n    to the collector.\n\n    The main motivation behind this Cython extension are the perfomance reasons, where\n    ETW can generate a huge volume of events, and the parsing\n    process is very CPU intensive.\n\n    Use\n    ---\n\n    kevt_stream_collector = KEventStreamCollector(logger_name)\n\n    Register a python callback:\n\n    def next_kevt(ketype, cpuid, ts, kparams):\n        # your logic here\n    kevt_stream_collector.open_kstream(next_kevt)\n\n\n    ", /*tp_doc*/
  __pyx_tp_traverse_8kstreamc_KEventStreamCollector, /*tp_traverse*/
  __pyx_tp_clear_8kstreamc_KEventStreamCollector, /*tp_clear*/
  0, /*tp_richcompare*/
  0, /*tp_weaklistoffset*/
  0, /*tp_iter*/
  0, /*tp_iternext*/
  __pyx_methods_8kstreamc_KEventStreamCollector, /*tp_methods*/
  0, /*tp_members*/
  0, /*tp_getset*/
  0, /*tp_base*/
  0, /*tp_dict*/
  0, /*tp_descr_get*/
  0, /*tp_descr_set*/
  0, /*tp_dictoffset*/
  __pyx_pw_8kstreamc_21KEventStreamCollector_1__init__, /*tp_init*/
  0, /*tp_alloc*/
  __pyx_tp_new_8kstreamc_KEventStreamCollector, /*tp_new*/
  0, /*tp_free*/
  0, /*tp_is_gc*/
  0, /*tp_bases*/
  0, /*tp_mro*/
  0, /*tp_cache*/
  0, /*tp_subclasses*/
  0, /*tp_weaklist*/
  0, /*tp_del*/
  0, /*tp_version_tag*/
  #if PY_VERSION_HEX >= 0x030400a1
  0, /*tp_finalize*/
  #endif
};

static struct __pyx_obj_8kstreamc___pyx_scope_struct__add_pid_filter *__pyx_freelist_8kstreamc___pyx_scope_struct__add_pid_filter[8];
static int __pyx_freecount_8kstreamc___pyx_scope_struct__add_pid_filter = 0;

static PyObject *__pyx_tp_new_8kstreamc___pyx_scope_struct__add_pid_filter(PyTypeObject *t, CYTHON_UNUSED PyObject *a, CYTHON_UNUSED PyObject *k) {
  PyObject *o;
  if (CYTHON_COMPILING_IN_CPYTHON && likely((__pyx_freecount_8kstreamc___pyx_scope_struct__add_pid_filter > 0) & (t->tp_basicsize == sizeof(struct __pyx_obj_8kstreamc___pyx_scope_struct__add_pid_filter)))) {
    o = (PyObject*)__pyx_freelist_8kstreamc___pyx_scope_struct__add_pid_filter[--__pyx_freecount_8kstreamc___pyx_scope_struct__add_pid_filter];
    memset(o, 0, sizeof(struct __pyx_obj_8kstreamc___pyx_scope_struct__add_pid_filter));
    (void) PyObject_INIT(o, t);
    PyObject_GC_Track(o);
  } else {
    o = (*t->tp_alloc)(t, 0);
    if (unlikely(!o)) return 0;
  }
  return o;
}

static void __pyx_tp_dealloc_8kstreamc___pyx_scope_struct__add_pid_filter(PyObject *o) {
  struct __pyx_obj_8kstreamc___pyx_scope_struct__add_pid_filter *p = (struct __pyx_obj_8kstreamc___pyx_scope_struct__add_pid_filter *)o;
  PyObject_GC_UnTrack(o);
  Py_CLEAR(p->__pyx_v_pid);
  if (CYTHON_COMPILING_IN_CPYTHON && ((__pyx_freecount_8kstreamc___pyx_scope_struct__add_pid_filter < 8) & (Py_TYPE(o)->tp_basicsize == sizeof(struct __pyx_obj_8kstreamc___pyx_scope_struct__add_pid_filter)))) {
    __pyx_freelist_8kstreamc___pyx_scope_struct__add_pid_filter[__pyx_freecount_8kstreamc___pyx_scope_struct__add_pid_filter++] = ((struct __pyx_obj_8kstreamc___pyx_scope_struct__add_pid_filter *)o);
  } else {
    (*Py_TYPE(o)->tp_free)(o);
  }
}

static int __pyx_tp_traverse_8kstreamc___pyx_scope_struct__add_pid_filter(PyObject *o, visitproc v, void *a) {
  int e;
  struct __pyx_obj_8kstreamc___pyx_scope_struct__add_pid_filter *p = (struct __pyx_obj_8kstreamc___pyx_scope_struct__add_pid_filter *)o;
  if (p->__pyx_v_pid) {
    e = (*v)(p->__pyx_v_pid, a); if (e) return e;
  }
  return 0;
}

static int __pyx_tp_clear_8kstreamc___pyx_scope_struct__add_pid_filter(PyObject *o) {
  PyObject* tmp;
  struct __pyx_obj_8kstreamc___pyx_scope_struct__add_pid_filter *p = (struct __pyx_obj_8kstreamc___pyx_scope_struct__add_pid_filter *)o;
  tmp = ((PyObject*)p->__pyx_v_pid);
  p->__pyx_v_pid = Py_None; Py_INCREF(Py_None);
  Py_XDECREF(tmp);
  return 0;
}

static PyTypeObject __pyx_type_8kstreamc___pyx_scope_struct__add_pid_filter = {
  PyVarObject_HEAD_INIT(0, 0)
  "kstreamc.__pyx_scope_struct__add_pid_filter", /*tp_name*/
  sizeof(struct __pyx_obj_8kstreamc___pyx_scope_struct__add_pid_filter), /*tp_basicsize*/
  0, /*tp_itemsize*/
  __pyx_tp_dealloc_8kstreamc___pyx_scope_struct__add_pid_filter, /*tp_dealloc*/
  0, /*tp_print*/
  0, /*tp_getattr*/
  0, /*tp_setattr*/
  #if PY_MAJOR_VERSION < 3
  0, /*tp_compare*/
  #endif
  #if PY_MAJOR_VERSION >= 3
  0, /*tp_as_async*/
  #endif
  0, /*tp_repr*/
  0, /*tp_as_number*/
  0, /*tp_as_sequence*/
  0, /*tp_as_mapping*/
  0, /*tp_hash*/
  0, /*tp_call*/
  0, /*tp_str*/
  0, /*tp_getattro*/
  0, /*tp_setattro*/
  0, /*tp_as_buffer*/
  Py_TPFLAGS_DEFAULT|Py_TPFLAGS_HAVE_VERSION_TAG|Py_TPFLAGS_CHECKTYPES|Py_TPFLAGS_HAVE_NEWBUFFER|Py_TPFLAGS_HAVE_GC, /*tp_flags*/
  0, /*tp_doc*/
  __pyx_tp_traverse_8kstreamc___pyx_scope_struct__add_pid_filter, /*tp_traverse*/
  __pyx_tp_clear_8kstreamc___pyx_scope_struct__add_pid_filter, /*tp_clear*/
  0, /*tp_richcompare*/
  0, /*tp_weaklistoffset*/
  0, /*tp_iter*/
  0, /*tp_iternext*/
  0, /*tp_methods*/
  0, /*tp_members*/
  0, /*tp_getset*/
  0, /*tp_base*/
  0, /*tp_dict*/
  0, /*tp_descr_get*/
  0, /*tp_descr_set*/
  0, /*tp_dictoffset*/
  0, /*tp_init*/
  0, /*tp_alloc*/
  __pyx_tp_new_8kstreamc___pyx_scope_struct__add_pid_filter, /*tp_new*/
  0, /*tp_free*/
  0, /*tp_is_gc*/
  0, /*tp_bases*/
  0, /*tp_mro*/
  0, /*tp_cache*/
  0, /*tp_subclasses*/
  0, /*tp_weaklist*/
  0, /*tp_del*/
  0, /*tp_version_tag*/
  #if PY_VERSION_HEX >= 0x030400a1
  0, /*tp_finalize*/
  #endif
};

static PyMethodDef __pyx_methods[] = {
  {0, 0, 0, 0}
};

#if PY_MAJOR_VERSION >= 3
static struct PyModuleDef __pyx_moduledef = {
  #if PY_VERSION_HEX < 0x03020000
    { PyObject_HEAD_INIT(NULL) NULL, 0, NULL },
  #else
    PyModuleDef_HEAD_INIT,
  #endif
    "kstreamc",
    0, /* m_doc */
    -1, /* m_size */
    __pyx_methods /* m_methods */,
    NULL, /* m_reload */
    NULL, /* m_traverse */
    NULL, /* m_clear */
    NULL /* m_free */
};
#endif

static __Pyx_StringTabEntry __pyx_string_tab[] = {
  {&__pyx_kp_s_0, __pyx_k_0, sizeof(__pyx_k_0), 0, 0, 1, 0},
  {&__pyx_kp_s_0_0_0_0, __pyx_k_0_0_0_0, sizeof(__pyx_k_0_0_0_0), 0, 0, 1, 0},
  {&__pyx_kp_s_1, __pyx_k_1, sizeof(__pyx_k_1), 0, 0, 1, 0},
  {&__pyx_kp_s_2cb15d1d_5fc1_11d2_abe1_00a0c911, __pyx_k_2cb15d1d_5fc1_11d2_abe1_00a0c911, sizeof(__pyx_k_2cb15d1d_5fc1_11d2_abe1_00a0c911), 0, 0, 1, 0},
  {&__pyx_kp_s_3d6fa8d0_fe05_11d0_9dda_00c04fd7, __pyx_k_3d6fa8d0_fe05_11d0_9dda_00c04fd7, sizeof(__pyx_k_3d6fa8d0_fe05_11d0_9dda_00c04fd7), 0, 0, 1, 0},
  {&__pyx_kp_s_3d6fa8d1_fe05_11d0_9dda_00c04fd7, __pyx_k_3d6fa8d1_fe05_11d0_9dda_00c04fd7, sizeof(__pyx_k_3d6fa8d1_fe05_11d0_9dda_00c04fd7), 0, 0, 1, 0},
  {&__pyx_n_s_ENUM_IMAGE, __pyx_k_ENUM_IMAGE, sizeof(__pyx_k_ENUM_IMAGE), 0, 0, 1, 1},
  {&__pyx_n_s_ENUM_PROCESS, __pyx_k_ENUM_PROCESS, sizeof(__pyx_k_ENUM_PROCESS), 0, 0, 1, 1},
  {&__pyx_n_s_ENUM_THREAD, __pyx_k_ENUM_THREAD, sizeof(__pyx_k_ENUM_THREAD), 0, 0, 1, 1},
  {&__pyx_kp_s_ERROR_Unable_to_open_kernel_even, __pyx_k_ERROR_Unable_to_open_kernel_even, sizeof(__pyx_k_ERROR_Unable_to_open_kernel_even), 0, 0, 1, 0},
  {&__pyx_n_s_Exception, __pyx_k_Exception, sizeof(__pyx_k_Exception), 0, 0, 1, 1},
  {&__pyx_n_s_FileHandler, __pyx_k_FileHandler, sizeof(__pyx_k_FileHandler), 0, 0, 1, 1},
  {&__pyx_n_s_KeyboardInterrupt, __pyx_k_KeyboardInterrupt, sizeof(__pyx_k_KeyboardInterrupt), 0, 0, 1, 1},
  {&__pyx_kp_s_L, __pyx_k_L, sizeof(__pyx_k_L), 0, 0, 1, 0},
  {&__pyx_n_s_Logger, __pyx_k_Logger, sizeof(__pyx_k_Logger), 0, 0, 1, 1},
  {&__pyx_kp_s_Opening_kernel_event_stream, __pyx_k_Opening_kernel_event_stream, sizeof(__pyx_k_Opening_kernel_event_stream), 0, 0, 1, 0},
  {&__pyx_n_s_PID_PARAM_NAME, __pyx_k_PID_PARAM_NAME, sizeof(__pyx_k_PID_PARAM_NAME), 0, 0, 1, 1},
  {&__pyx_n_s_REGISTRY_KEVENT_GUID, __pyx_k_REGISTRY_KEVENT_GUID, sizeof(__pyx_k_REGISTRY_KEVENT_GUID), 0, 0, 1, 1},
  {&__pyx_n_s_REG_CREATE_KCB, __pyx_k_REG_CREATE_KCB, sizeof(__pyx_k_REG_CREATE_KCB), 0, 0, 1, 1},
  {&__pyx_n_s_REG_DELETE_KCB, __pyx_k_REG_DELETE_KCB, sizeof(__pyx_k_REG_DELETE_KCB), 0, 0, 1, 1},
  {&__pyx_n_s_RuntimeError, __pyx_k_RuntimeError, sizeof(__pyx_k_RuntimeError), 0, 0, 1, 1},
  {&__pyx_n_s_TID_PARAM_NAME, __pyx_k_TID_PARAM_NAME, sizeof(__pyx_k_TID_PARAM_NAME), 0, 0, 1, 1},
  {&__pyx_n_s_TypeError, __pyx_k_TypeError, sizeof(__pyx_k_TypeError), 0, 0, 1, 1},
  {&__pyx_n_s_UnicodeDecodeError, __pyx_k_UnicodeDecodeError, sizeof(__pyx_k_UnicodeDecodeError), 0, 0, 1, 1},
  {&__pyx_kp_s__2, __pyx_k__2, sizeof(__pyx_k__2), 0, 0, 1, 0},
  {&__pyx_kp_s__7, __pyx_k__7, sizeof(__pyx_k__7), 0, 0, 1, 0},
  {&__pyx_n_s_a, __pyx_k_a, sizeof(__pyx_k_a), 0, 0, 1, 1},
  {&__pyx_kp_s_a_z0_9_A_Z_A_Z_a_z, __pyx_k_a_z0_9_A_Z_A_Z_a_z, sizeof(__pyx_k_a_z0_9_A_Z_A_Z_a_z), 0, 0, 1, 0},
  {&__pyx_n_s_add_pid_filter_locals_lambda, __pyx_k_add_pid_filter_locals_lambda, sizeof(__pyx_k_add_pid_filter_locals_lambda), 0, 0, 1, 1},
  {&__pyx_kp_s_ae53722e_c863_11d2_8659_00c04fa3, __pyx_k_ae53722e_c863_11d2_8659_00c04fa3, sizeof(__pyx_k_ae53722e_c863_11d2_8659_00c04fa3), 0, 0, 1, 0},
  {&__pyx_n_s_append, __pyx_k_append, sizeof(__pyx_k_append), 0, 0, 1, 1},
  {&__pyx_n_s_applicationbound, __pyx_k_applicationbound, sizeof(__pyx_k_applicationbound), 0, 0, 1, 1},
  {&__pyx_n_s_clear, __pyx_k_clear, sizeof(__pyx_k_clear), 0, 0, 1, 1},
  {&__pyx_n_s_close_kstream, __pyx_k_close_kstream, sizeof(__pyx_k_close_kstream), 0, 0, 1, 1},
  {&__pyx_n_s_compile, __pyx_k_compile, sizeof(__pyx_k_compile), 0, 0, 1, 1},
  {&__pyx_kp_s_d_02d_02d_d, __pyx_k_d_02d_02d_d, sizeof(__pyx_k_d_02d_02d_d), 0, 0, 1, 0},
  {&__pyx_n_s_enter, __pyx_k_enter, sizeof(__pyx_k_enter), 0, 0, 1, 1},
  {&__pyx_n_s_error, __pyx_k_error, sizeof(__pyx_k_error), 0, 0, 1, 1},
  {&__pyx_n_s_exit, __pyx_k_exit, sizeof(__pyx_k_exit), 0, 0, 1, 1},
  {&__pyx_n_s_expanduser, __pyx_k_expanduser, sizeof(__pyx_k_expanduser), 0, 0, 1, 1},
  {&__pyx_kp_s_fibratus, __pyx_k_fibratus, sizeof(__pyx_k_fibratus), 0, 0, 1, 0},
  {&__pyx_kp_s_fibratus_log, __pyx_k_fibratus_log, sizeof(__pyx_k_fibratus_log), 0, 0, 1, 0},
  {&__pyx_n_s_format_exc, __pyx_k_format_exc, sizeof(__pyx_k_format_exc), 0, 0, 1, 1},
  {&__pyx_n_s_get_thread, __pyx_k_get_thread, sizeof(__pyx_k_get_thread), 0, 0, 1, 1},
  {&__pyx_n_s_getpid, __pyx_k_getpid, sizeof(__pyx_k_getpid), 0, 0, 1, 1},
  {&__pyx_n_s_hex, __pyx_k_hex, sizeof(__pyx_k_hex), 0, 0, 1, 1},
  {&__pyx_n_s_htonl, __pyx_k_htonl, sizeof(__pyx_k_htonl), 0, 0, 1, 1},
  {&__pyx_n_s_import, __pyx_k_import, sizeof(__pyx_k_import), 0, 0, 1, 1},
  {&__pyx_n_s_inet_ntoa, __pyx_k_inet_ntoa, sizeof(__pyx_k_inet_ntoa), 0, 0, 1, 1},
  {&__pyx_n_s_info, __pyx_k_info, sizeof(__pyx_k_info), 0, 0, 1, 1},
  {&__pyx_n_s_join, __pyx_k_join, sizeof(__pyx_k_join), 0, 0, 1, 1},
  {&__pyx_n_s_klogger, __pyx_k_klogger, sizeof(__pyx_k_klogger), 0, 0, 1, 1},
  {&__pyx_n_s_kstreamc, __pyx_k_kstreamc, sizeof(__pyx_k_kstreamc), 0, 0, 1, 1},
  {&__pyx_n_s_logbook, __pyx_k_logbook, sizeof(__pyx_k_logbook), 0, 0, 1, 1},
  {&__pyx_n_s_lower, __pyx_k_lower, sizeof(__pyx_k_lower), 0, 0, 1, 1},
  {&__pyx_n_s_main, __pyx_k_main, sizeof(__pyx_k_main), 0, 0, 1, 1},
  {&__pyx_n_s_mode, __pyx_k_mode, sizeof(__pyx_k_mode), 0, 0, 1, 1},
  {&__pyx_n_s_name, __pyx_k_name, sizeof(__pyx_k_name), 0, 0, 1, 1},
  {&__pyx_n_s_name_2, __pyx_k_name_2, sizeof(__pyx_k_name_2), 0, 0, 1, 1},
  {&__pyx_n_s_ntohs, __pyx_k_ntohs, sizeof(__pyx_k_ntohs), 0, 0, 1, 1},
  {&__pyx_n_s_os, __pyx_k_os, sizeof(__pyx_k_os), 0, 0, 1, 1},
  {&__pyx_n_s_pack, __pyx_k_pack, sizeof(__pyx_k_pack), 0, 0, 1, 1},
  {&__pyx_n_s_parent_id, __pyx_k_parent_id, sizeof(__pyx_k_parent_id), 0, 0, 1, 1},
  {&__pyx_n_s_path, __pyx_k_path, sizeof(__pyx_k_path), 0, 0, 1, 1},
  {&__pyx_n_s_pid, __pyx_k_pid, sizeof(__pyx_k_pid), 0, 0, 1, 1},
  {&__pyx_n_s_process_id, __pyx_k_process_id, sizeof(__pyx_k_process_id), 0, 0, 1, 1},
  {&__pyx_n_s_pyx_vtable, __pyx_k_pyx_vtable, sizeof(__pyx_k_pyx_vtable), 0, 0, 1, 1},
  {&__pyx_n_s_re, __pyx_k_re, sizeof(__pyx_k_re), 0, 0, 1, 1},
  {&__pyx_kp_s_s_s_s_s_d, __pyx_k_s_s_s_s_d, sizeof(__pyx_k_s_s_s_s_d), 0, 0, 1, 0},
  {&__pyx_n_s_socket, __pyx_k_socket, sizeof(__pyx_k_socket), 0, 0, 1, 1},
  {&__pyx_n_s_struct, __pyx_k_struct, sizeof(__pyx_k_struct), 0, 0, 1, 1},
  {&__pyx_n_s_sub, __pyx_k_sub, sizeof(__pyx_k_sub), 0, 0, 1, 1},
  {&__pyx_n_s_test, __pyx_k_test, sizeof(__pyx_k_test), 0, 0, 1, 1},
  {&__pyx_n_s_thread_id, __pyx_k_thread_id, sizeof(__pyx_k_thread_id), 0, 0, 1, 1},
  {&__pyx_n_s_thread_registry, __pyx_k_thread_registry, sizeof(__pyx_k_thread_registry), 0, 0, 1, 1},
  {&__pyx_n_s_traceback, __pyx_k_traceback, sizeof(__pyx_k_traceback), 0, 0, 1, 1},
  {&__pyx_n_s_unknown, __pyx_k_unknown, sizeof(__pyx_k_unknown), 0, 0, 1, 1},
  {&__pyx_kp_s_utf_8, __pyx_k_utf_8, sizeof(__pyx_k_utf_8), 0, 0, 1, 0},
  {0, 0, 0, 0, 0, 0, 0}
};
static int __Pyx_InitCachedBuiltins(void) {
  __pyx_builtin_RuntimeError = __Pyx_GetBuiltinName(__pyx_n_s_RuntimeError); if (!__pyx_builtin_RuntimeError) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 156; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __pyx_builtin_Exception = __Pyx_GetBuiltinName(__pyx_n_s_Exception); if (!__pyx_builtin_Exception) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 317; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __pyx_builtin_KeyboardInterrupt = __Pyx_GetBuiltinName(__pyx_n_s_KeyboardInterrupt); if (!__pyx_builtin_KeyboardInterrupt) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 320; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __pyx_builtin_UnicodeDecodeError = __Pyx_GetBuiltinName(__pyx_n_s_UnicodeDecodeError); if (!__pyx_builtin_UnicodeDecodeError) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 361; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __pyx_builtin_hex = __Pyx_GetBuiltinName(__pyx_n_s_hex); if (!__pyx_builtin_hex) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 373; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __pyx_builtin_TypeError = __Pyx_GetBuiltinName(__pyx_n_s_TypeError); if (!__pyx_builtin_TypeError) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 394; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  return 0;
  __pyx_L1_error:;
  return -1;
}

static int __Pyx_InitCachedConstants(void) {
  __Pyx_RefNannyDeclarations
  __Pyx_RefNannySetupContext("__Pyx_InitCachedConstants", 0);

  /* "kstreamc.pyx":98
 *         self.on_kstream_open_callback = None
 *         self.kevent_logfile.LoggerName = PyBytes_AsString(self.klogger)
 *         self.property_regex = re.compile('((?<=[a-z0-9])[A-Z]|(?!^)[A-Z](?=[a-z]))')             # <<<<<<<<<<<<<<
 *         self.pointer_size = 8
 *         self.ketypes = {}
 */
  __pyx_tuple_ = PyTuple_Pack(1, __pyx_kp_s_a_z0_9_A_Z_A_Z_a_z); if (unlikely(!__pyx_tuple_)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 98; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_tuple_);
  __Pyx_GIVEREF(__pyx_tuple_);

  /* "kstreamc.pyx":107
 *         self.exclude_from_filters = [ENUM_PROCESS, ENUM_THREAD, ENUM_IMAGE, REG_CREATE_KCB, REG_DELETE_KCB]
 *         self.logger = Logger(KEventStreamCollector.__name__)
 *         self.file_handler = FileHandler(os.path.join(os.path.expanduser('~'), '.fibratus', 'fibratus.log'), mode='a')             # <<<<<<<<<<<<<<
 *         self.own_pid = os.getpid()
 *         self.thread_registry = thread_registry
 */
  __pyx_tuple__3 = PyTuple_Pack(1, __pyx_kp_s__2); if (unlikely(!__pyx_tuple__3)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 107; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_tuple__3);
  __Pyx_GIVEREF(__pyx_tuple__3);

  /* "kstreamc.pyx":139
 * 
 *         with self.file_handler.applicationbound():
 *             self.logger.info('Opening kernel event stream')             # <<<<<<<<<<<<<<
 *         self.handle = OpenTrace(&self.kevent_logfile)
 * 
 */
  __pyx_tuple__4 = PyTuple_Pack(1, __pyx_kp_s_Opening_kernel_event_stream); if (unlikely(!__pyx_tuple__4)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 139; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_tuple__4);
  __Pyx_GIVEREF(__pyx_tuple__4);

  /* "kstreamc.pyx":138
 *         self.kevent_logfile.Context = <PVOID> self
 * 
 *         with self.file_handler.applicationbound():             # <<<<<<<<<<<<<<
 *             self.logger.info('Opening kernel event stream')
 *         self.handle = OpenTrace(&self.kevent_logfile)
 */
  __pyx_tuple__5 = PyTuple_Pack(3, Py_None, Py_None, Py_None); if (unlikely(!__pyx_tuple__5)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 138; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_tuple__5);
  __Pyx_GIVEREF(__pyx_tuple__5);

  /* "kstreamc.pyx":318
 *                                             params)
 *         except Exception as e:
 *             with self.file_handler.applicationbound():             # <<<<<<<<<<<<<<
 *                 self.logger.error(traceback.format_exc())
 *         except KeyboardInterrupt:
 */
  __pyx_tuple__6 = PyTuple_Pack(3, Py_None, Py_None, Py_None); if (unlikely(!__pyx_tuple__6)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 318; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_tuple__6);
  __Pyx_GIVEREF(__pyx_tuple__6);

  /* "kstreamc.pyx":509
 *             # remove the braces/null terminator
 *             # from the GUID string
 *             pystr = pystr[1:-2].lower()             # <<<<<<<<<<<<<<
 *             self.ketypes[kkey] = pystr, opcode
 *             return pystr, opcode
 */
  __pyx_slice__8 = PySlice_New(__pyx_int_1, __pyx_int_neg_2, Py_None); if (unlikely(!__pyx_slice__8)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 509; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_slice__8);
  __Pyx_GIVEREF(__pyx_slice__8);

  /* "kstreamc.pyx":41
 * REGISTRY_KEVENT_GUID = 'ae53722e-c863-11d2-8659-00c04fa321a1'
 * 
 * ENUM_PROCESS = ('3d6fa8d0-fe05-11d0-9dda-00c04fd7ba7c', 3)             # <<<<<<<<<<<<<<
 * ENUM_THREAD = ('3d6fa8d1-fe05-11d0-9dda-00c04fd7ba7c', 3)
 * ENUM_IMAGE = ('2cb15d1d-5fc1-11d2-abe1-00a0c911f518', 3)
 */
  __pyx_tuple__9 = PyTuple_Pack(2, __pyx_kp_s_3d6fa8d0_fe05_11d0_9dda_00c04fd7, __pyx_int_3); if (unlikely(!__pyx_tuple__9)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 41; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_tuple__9);
  __Pyx_GIVEREF(__pyx_tuple__9);

  /* "kstreamc.pyx":42
 * 
 * ENUM_PROCESS = ('3d6fa8d0-fe05-11d0-9dda-00c04fd7ba7c', 3)
 * ENUM_THREAD = ('3d6fa8d1-fe05-11d0-9dda-00c04fd7ba7c', 3)             # <<<<<<<<<<<<<<
 * ENUM_IMAGE = ('2cb15d1d-5fc1-11d2-abe1-00a0c911f518', 3)
 * REG_CREATE_KCB = ('ae53722e-c863-11d2-8659-00c04fa321a1', 22)
 */
  __pyx_tuple__10 = PyTuple_Pack(2, __pyx_kp_s_3d6fa8d1_fe05_11d0_9dda_00c04fd7, __pyx_int_3); if (unlikely(!__pyx_tuple__10)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 42; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_tuple__10);
  __Pyx_GIVEREF(__pyx_tuple__10);

  /* "kstreamc.pyx":43
 * ENUM_PROCESS = ('3d6fa8d0-fe05-11d0-9dda-00c04fd7ba7c', 3)
 * ENUM_THREAD = ('3d6fa8d1-fe05-11d0-9dda-00c04fd7ba7c', 3)
 * ENUM_IMAGE = ('2cb15d1d-5fc1-11d2-abe1-00a0c911f518', 3)             # <<<<<<<<<<<<<<
 * REG_CREATE_KCB = ('ae53722e-c863-11d2-8659-00c04fa321a1', 22)
 * REG_DELETE_KCB = ('ae53722e-c863-11d2-8659-00c04fa321a1', 23)
 */
  __pyx_tuple__11 = PyTuple_Pack(2, __pyx_kp_s_2cb15d1d_5fc1_11d2_abe1_00a0c911, __pyx_int_3); if (unlikely(!__pyx_tuple__11)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 43; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_tuple__11);
  __Pyx_GIVEREF(__pyx_tuple__11);

  /* "kstreamc.pyx":44
 * ENUM_THREAD = ('3d6fa8d1-fe05-11d0-9dda-00c04fd7ba7c', 3)
 * ENUM_IMAGE = ('2cb15d1d-5fc1-11d2-abe1-00a0c911f518', 3)
 * REG_CREATE_KCB = ('ae53722e-c863-11d2-8659-00c04fa321a1', 22)             # <<<<<<<<<<<<<<
 * REG_DELETE_KCB = ('ae53722e-c863-11d2-8659-00c04fa321a1', 23)
 * 
 */
  __pyx_tuple__12 = PyTuple_Pack(2, __pyx_kp_s_ae53722e_c863_11d2_8659_00c04fa3, __pyx_int_22); if (unlikely(!__pyx_tuple__12)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 44; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_tuple__12);
  __Pyx_GIVEREF(__pyx_tuple__12);

  /* "kstreamc.pyx":45
 * ENUM_IMAGE = ('2cb15d1d-5fc1-11d2-abe1-00a0c911f518', 3)
 * REG_CREATE_KCB = ('ae53722e-c863-11d2-8659-00c04fa321a1', 22)
 * REG_DELETE_KCB = ('ae53722e-c863-11d2-8659-00c04fa321a1', 23)             # <<<<<<<<<<<<<<
 * 
 * 
 */
  __pyx_tuple__13 = PyTuple_Pack(2, __pyx_kp_s_ae53722e_c863_11d2_8659_00c04fa3, __pyx_int_23); if (unlikely(!__pyx_tuple__13)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 45; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_tuple__13);
  __Pyx_GIVEREF(__pyx_tuple__13);
  __Pyx_RefNannyFinishContext();
  return 0;
  __pyx_L1_error:;
  __Pyx_RefNannyFinishContext();
  return -1;
}

static int __Pyx_InitGlobals(void) {
  if (__Pyx_InitStrings(__pyx_string_tab) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;};
  __pyx_int_1 = PyInt_FromLong(1); if (unlikely(!__pyx_int_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __pyx_int_2 = PyInt_FromLong(2); if (unlikely(!__pyx_int_2)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __pyx_int_3 = PyInt_FromLong(3); if (unlikely(!__pyx_int_3)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __pyx_int_4 = PyInt_FromLong(4); if (unlikely(!__pyx_int_4)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __pyx_int_8 = PyInt_FromLong(8); if (unlikely(!__pyx_int_8)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __pyx_int_22 = PyInt_FromLong(22); if (unlikely(!__pyx_int_22)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __pyx_int_23 = PyInt_FromLong(23); if (unlikely(!__pyx_int_23)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __pyx_int_4294967295 = PyInt_FromString((char *)"4294967295", 0, 0); if (unlikely(!__pyx_int_4294967295)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __pyx_int_neg_2 = PyInt_FromLong(-2); if (unlikely(!__pyx_int_neg_2)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  return 0;
  __pyx_L1_error:;
  return -1;
}

#if PY_MAJOR_VERSION < 3
PyMODINIT_FUNC initkstreamc(void); /*proto*/
PyMODINIT_FUNC initkstreamc(void)
#else
PyMODINIT_FUNC PyInit_kstreamc(void); /*proto*/
PyMODINIT_FUNC PyInit_kstreamc(void)
#endif
{
  PyObject *__pyx_t_1 = NULL;
  PyObject *__pyx_t_2 = NULL;
  int __pyx_lineno = 0;
  const char *__pyx_filename = NULL;
  int __pyx_clineno = 0;
  __Pyx_RefNannyDeclarations
  #if CYTHON_REFNANNY
  __Pyx_RefNanny = __Pyx_RefNannyImportAPI("refnanny");
  if (!__Pyx_RefNanny) {
      PyErr_Clear();
      __Pyx_RefNanny = __Pyx_RefNannyImportAPI("Cython.Runtime.refnanny");
      if (!__Pyx_RefNanny)
          Py_FatalError("failed to import 'refnanny' module");
  }
  #endif
  __Pyx_RefNannySetupContext("PyMODINIT_FUNC PyInit_kstreamc(void)", 0);
  if (__Pyx_check_binary_version() < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __pyx_empty_tuple = PyTuple_New(0); if (unlikely(!__pyx_empty_tuple)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __pyx_empty_bytes = PyBytes_FromStringAndSize("", 0); if (unlikely(!__pyx_empty_bytes)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  #ifdef __Pyx_CyFunction_USED
  if (__pyx_CyFunction_init() < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  #endif
  #ifdef __Pyx_FusedFunction_USED
  if (__pyx_FusedFunction_init() < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  #endif
  #ifdef __Pyx_Coroutine_USED
  if (__pyx_Coroutine_init() < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  #endif
  #ifdef __Pyx_Generator_USED
  if (__pyx_Generator_init() < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  #endif
  #ifdef __Pyx_StopAsyncIteration_USED
  if (__pyx_StopAsyncIteration_init() < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  #endif
  /*--- Library function declarations ---*/
  /*--- Threads initialization code ---*/
  #if defined(__PYX_FORCE_INIT_THREADS) && __PYX_FORCE_INIT_THREADS
  #ifdef WITH_THREAD /* Python build with threading support? */
  PyEval_InitThreads();
  #endif
  #endif
  /*--- Module creation code ---*/
  #if PY_MAJOR_VERSION < 3
  __pyx_m = Py_InitModule4("kstreamc", __pyx_methods, 0, 0, PYTHON_API_VERSION); Py_XINCREF(__pyx_m);
  #else
  __pyx_m = PyModule_Create(&__pyx_moduledef);
  #endif
  if (unlikely(!__pyx_m)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __pyx_d = PyModule_GetDict(__pyx_m); if (unlikely(!__pyx_d)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  Py_INCREF(__pyx_d);
  __pyx_b = PyImport_AddModule(__Pyx_BUILTIN_MODULE_NAME); if (unlikely(!__pyx_b)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  #if CYTHON_COMPILING_IN_PYPY
  Py_INCREF(__pyx_b);
  #endif
  if (PyObject_SetAttrString(__pyx_m, "__builtins__", __pyx_b) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;};
  /*--- Initialize various global constants etc. ---*/
  if (__Pyx_InitGlobals() < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  #if PY_MAJOR_VERSION < 3 && (__PYX_DEFAULT_STRING_ENCODING_IS_ASCII || __PYX_DEFAULT_STRING_ENCODING_IS_DEFAULT)
  if (__Pyx_init_sys_getdefaultencoding_params() < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  #endif
  if (__pyx_module_is_main_kstreamc) {
    if (PyObject_SetAttrString(__pyx_m, "__name__", __pyx_n_s_main) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  }
  #if PY_MAJOR_VERSION >= 3
  {
    PyObject *modules = PyImport_GetModuleDict(); if (unlikely(!modules)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    if (!PyDict_GetItemString(modules, "kstreamc")) {
      if (unlikely(PyDict_SetItemString(modules, "kstreamc", __pyx_m) < 0)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
    }
  }
  #endif
  /*--- Builtin init code ---*/
  if (__Pyx_InitCachedBuiltins() < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  /*--- Constants init code ---*/
  if (__Pyx_InitCachedConstants() < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  /*--- Global init code ---*/
  /*--- Variable export code ---*/
  /*--- Function export code ---*/
  /*--- Type init code ---*/
  __pyx_vtabptr_8kstreamc_KEventStreamCollector = &__pyx_vtable_8kstreamc_KEventStreamCollector;
  __pyx_vtable_8kstreamc_KEventStreamCollector.process_kevent_callback = (PyObject *(*)(struct __pyx_obj_8kstreamc_KEventStreamCollector *, EVENT_RECORD *))__pyx_f_8kstreamc_21KEventStreamCollector_process_kevent_callback;
  __pyx_vtable_8kstreamc_KEventStreamCollector._process_kevent = (void (*)(struct __pyx_obj_8kstreamc_KEventStreamCollector *, EVENT_RECORD *))__pyx_f_8kstreamc_21KEventStreamCollector__process_kevent;
  __pyx_vtable_8kstreamc_KEventStreamCollector._free_buffers = (PyObject *(*)(struct __pyx_obj_8kstreamc_KEventStreamCollector *, TRACE_EVENT_INFO *, BYTE *))__pyx_f_8kstreamc_21KEventStreamCollector__free_buffers;
  __pyx_vtable_8kstreamc_KEventStreamCollector._parse_property = (PyObject *(*)(struct __pyx_obj_8kstreamc_KEventStreamCollector *, USHORT, USHORT, BYTE *))__pyx_f_8kstreamc_21KEventStreamCollector__parse_property;
  __pyx_vtable_8kstreamc_KEventStreamCollector._lookup_sid = (PyObject *(*)(struct __pyx_obj_8kstreamc_KEventStreamCollector *, BYTE *, BOOL))__pyx_f_8kstreamc_21KEventStreamCollector__lookup_sid;
  __pyx_vtable_8kstreamc_KEventStreamCollector._assemble_type = (PyObject *(*)(struct __pyx_obj_8kstreamc_KEventStreamCollector *, GUID, UCHAR))__pyx_f_8kstreamc_21KEventStreamCollector__assemble_type;
  __pyx_vtable_8kstreamc_KEventStreamCollector._filetime_to_systime = (PyObject *(*)(struct __pyx_obj_8kstreamc_KEventStreamCollector *, EVENT_HEADER))__pyx_f_8kstreamc_21KEventStreamCollector__filetime_to_systime;
  __pyx_vtable_8kstreamc_KEventStreamCollector._exclude_kevent = (PyObject *(*)(struct __pyx_obj_8kstreamc_KEventStreamCollector *, PyObject *, PyObject *))__pyx_f_8kstreamc_21KEventStreamCollector__exclude_kevent;
  __pyx_vtable_8kstreamc_KEventStreamCollector._aggregate_info = (PyObject *(*)(struct __pyx_obj_8kstreamc_KEventStreamCollector *, EVENT_RECORD *, PyObject *, PyObject *))__pyx_f_8kstreamc_21KEventStreamCollector__aggregate_info;
  if (PyType_Ready(&__pyx_type_8kstreamc_KEventStreamCollector) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 48; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __pyx_type_8kstreamc_KEventStreamCollector.tp_print = 0;
  if (__Pyx_SetVtable(__pyx_type_8kstreamc_KEventStreamCollector.tp_dict, __pyx_vtabptr_8kstreamc_KEventStreamCollector) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 48; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  if (PyObject_SetAttrString(__pyx_m, "KEventStreamCollector", (PyObject *)&__pyx_type_8kstreamc_KEventStreamCollector) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 48; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __pyx_ptype_8kstreamc_KEventStreamCollector = &__pyx_type_8kstreamc_KEventStreamCollector;
  if (PyType_Ready(&__pyx_type_8kstreamc___pyx_scope_struct__add_pid_filter) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 167; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __pyx_type_8kstreamc___pyx_scope_struct__add_pid_filter.tp_print = 0;
  __pyx_ptype_8kstreamc___pyx_scope_struct__add_pid_filter = &__pyx_type_8kstreamc___pyx_scope_struct__add_pid_filter;
  /*--- Type import code ---*/
  __pyx_ptype_7cpython_4type_type = __Pyx_ImportType(__Pyx_BUILTIN_MODULE_NAME, "type", 
  #if CYTHON_COMPILING_IN_PYPY
  sizeof(PyTypeObject),
  #else
  sizeof(PyHeapTypeObject),
  #endif
  0); if (unlikely(!__pyx_ptype_7cpython_4type_type)) {__pyx_filename = __pyx_f[1]; __pyx_lineno = 9; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __pyx_ptype_7cpython_4bool_bool = __Pyx_ImportType(__Pyx_BUILTIN_MODULE_NAME, "bool", sizeof(PyBoolObject), 0); if (unlikely(!__pyx_ptype_7cpython_4bool_bool)) {__pyx_filename = __pyx_f[2]; __pyx_lineno = 8; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __pyx_ptype_7cpython_7complex_complex = __Pyx_ImportType(__Pyx_BUILTIN_MODULE_NAME, "complex", sizeof(PyComplexObject), 0); if (unlikely(!__pyx_ptype_7cpython_7complex_complex)) {__pyx_filename = __pyx_f[3]; __pyx_lineno = 15; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  /*--- Variable import code ---*/
  /*--- Function import code ---*/
  /*--- Execution code ---*/
  #if defined(__Pyx_Generator_USED) || defined(__Pyx_Coroutine_USED)
  if (__Pyx_patch_abc() < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  #endif

  /* "kstreamc.pyx":18
 * 
 * 
 * import socket             # <<<<<<<<<<<<<<
 * import struct
 * import re
 */
  __pyx_t_1 = __Pyx_Import(__pyx_n_s_socket, 0, -1); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 18; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_1);
  if (PyDict_SetItem(__pyx_d, __pyx_n_s_socket, __pyx_t_1) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 18; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0;

  /* "kstreamc.pyx":19
 * 
 * import socket
 * import struct             # <<<<<<<<<<<<<<
 * import re
 * import os
 */
  __pyx_t_1 = __Pyx_Import(__pyx_n_s_struct, 0, -1); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 19; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_1);
  if (PyDict_SetItem(__pyx_d, __pyx_n_s_struct, __pyx_t_1) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 19; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0;

  /* "kstreamc.pyx":20
 * import socket
 * import struct
 * import re             # <<<<<<<<<<<<<<
 * import os
 * import traceback
 */
  __pyx_t_1 = __Pyx_Import(__pyx_n_s_re, 0, -1); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 20; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_1);
  if (PyDict_SetItem(__pyx_d, __pyx_n_s_re, __pyx_t_1) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 20; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0;

  /* "kstreamc.pyx":21
 * import struct
 * import re
 * import os             # <<<<<<<<<<<<<<
 * import traceback
 * 
 */
  __pyx_t_1 = __Pyx_Import(__pyx_n_s_os, 0, -1); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 21; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_1);
  if (PyDict_SetItem(__pyx_d, __pyx_n_s_os, __pyx_t_1) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 21; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0;

  /* "kstreamc.pyx":22
 * import re
 * import os
 * import traceback             # <<<<<<<<<<<<<<
 * 
 * from logbook import Logger, FileHandler
 */
  __pyx_t_1 = __Pyx_Import(__pyx_n_s_traceback, 0, -1); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 22; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_1);
  if (PyDict_SetItem(__pyx_d, __pyx_n_s_traceback, __pyx_t_1) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 22; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0;

  /* "kstreamc.pyx":24
 * import traceback
 * 
 * from logbook import Logger, FileHandler             # <<<<<<<<<<<<<<
 * 
 * 
 */
  __pyx_t_1 = PyList_New(2); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 24; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_1);
  __Pyx_INCREF(__pyx_n_s_Logger);
  __Pyx_GIVEREF(__pyx_n_s_Logger);
  PyList_SET_ITEM(__pyx_t_1, 0, __pyx_n_s_Logger);
  __Pyx_INCREF(__pyx_n_s_FileHandler);
  __Pyx_GIVEREF(__pyx_n_s_FileHandler);
  PyList_SET_ITEM(__pyx_t_1, 1, __pyx_n_s_FileHandler);
  __pyx_t_2 = __Pyx_Import(__pyx_n_s_logbook, __pyx_t_1, -1); if (unlikely(!__pyx_t_2)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 24; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_2);
  __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0;
  __pyx_t_1 = __Pyx_ImportFrom(__pyx_t_2, __pyx_n_s_Logger); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 24; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_1);
  if (PyDict_SetItem(__pyx_d, __pyx_n_s_Logger, __pyx_t_1) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 24; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0;
  __pyx_t_1 = __Pyx_ImportFrom(__pyx_t_2, __pyx_n_s_FileHandler); if (unlikely(!__pyx_t_1)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 24; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_1);
  if (PyDict_SetItem(__pyx_d, __pyx_n_s_FileHandler, __pyx_t_1) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 24; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_DECREF(__pyx_t_1); __pyx_t_1 = 0;
  __Pyx_DECREF(__pyx_t_2); __pyx_t_2 = 0;

  /* "kstreamc.pyx":36
 *     MAX_NAME = 256
 * 
 * PID_PARAM_NAME = 'process_id'             # <<<<<<<<<<<<<<
 * TID_PARAM_NAME = 'thread_id'
 * 
 */
  if (PyDict_SetItem(__pyx_d, __pyx_n_s_PID_PARAM_NAME, __pyx_n_s_process_id) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 36; __pyx_clineno = __LINE__; goto __pyx_L1_error;}

  /* "kstreamc.pyx":37
 * 
 * PID_PARAM_NAME = 'process_id'
 * TID_PARAM_NAME = 'thread_id'             # <<<<<<<<<<<<<<
 * 
 * REGISTRY_KEVENT_GUID = 'ae53722e-c863-11d2-8659-00c04fa321a1'
 */
  if (PyDict_SetItem(__pyx_d, __pyx_n_s_TID_PARAM_NAME, __pyx_n_s_thread_id) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 37; __pyx_clineno = __LINE__; goto __pyx_L1_error;}

  /* "kstreamc.pyx":39
 * TID_PARAM_NAME = 'thread_id'
 * 
 * REGISTRY_KEVENT_GUID = 'ae53722e-c863-11d2-8659-00c04fa321a1'             # <<<<<<<<<<<<<<
 * 
 * ENUM_PROCESS = ('3d6fa8d0-fe05-11d0-9dda-00c04fd7ba7c', 3)
 */
  if (PyDict_SetItem(__pyx_d, __pyx_n_s_REGISTRY_KEVENT_GUID, __pyx_kp_s_ae53722e_c863_11d2_8659_00c04fa3) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 39; __pyx_clineno = __LINE__; goto __pyx_L1_error;}

  /* "kstreamc.pyx":41
 * REGISTRY_KEVENT_GUID = 'ae53722e-c863-11d2-8659-00c04fa321a1'
 * 
 * ENUM_PROCESS = ('3d6fa8d0-fe05-11d0-9dda-00c04fd7ba7c', 3)             # <<<<<<<<<<<<<<
 * ENUM_THREAD = ('3d6fa8d1-fe05-11d0-9dda-00c04fd7ba7c', 3)
 * ENUM_IMAGE = ('2cb15d1d-5fc1-11d2-abe1-00a0c911f518', 3)
 */
  if (PyDict_SetItem(__pyx_d, __pyx_n_s_ENUM_PROCESS, __pyx_tuple__9) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 41; __pyx_clineno = __LINE__; goto __pyx_L1_error;}

  /* "kstreamc.pyx":42
 * 
 * ENUM_PROCESS = ('3d6fa8d0-fe05-11d0-9dda-00c04fd7ba7c', 3)
 * ENUM_THREAD = ('3d6fa8d1-fe05-11d0-9dda-00c04fd7ba7c', 3)             # <<<<<<<<<<<<<<
 * ENUM_IMAGE = ('2cb15d1d-5fc1-11d2-abe1-00a0c911f518', 3)
 * REG_CREATE_KCB = ('ae53722e-c863-11d2-8659-00c04fa321a1', 22)
 */
  if (PyDict_SetItem(__pyx_d, __pyx_n_s_ENUM_THREAD, __pyx_tuple__10) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 42; __pyx_clineno = __LINE__; goto __pyx_L1_error;}

  /* "kstreamc.pyx":43
 * ENUM_PROCESS = ('3d6fa8d0-fe05-11d0-9dda-00c04fd7ba7c', 3)
 * ENUM_THREAD = ('3d6fa8d1-fe05-11d0-9dda-00c04fd7ba7c', 3)
 * ENUM_IMAGE = ('2cb15d1d-5fc1-11d2-abe1-00a0c911f518', 3)             # <<<<<<<<<<<<<<
 * REG_CREATE_KCB = ('ae53722e-c863-11d2-8659-00c04fa321a1', 22)
 * REG_DELETE_KCB = ('ae53722e-c863-11d2-8659-00c04fa321a1', 23)
 */
  if (PyDict_SetItem(__pyx_d, __pyx_n_s_ENUM_IMAGE, __pyx_tuple__11) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 43; __pyx_clineno = __LINE__; goto __pyx_L1_error;}

  /* "kstreamc.pyx":44
 * ENUM_THREAD = ('3d6fa8d1-fe05-11d0-9dda-00c04fd7ba7c', 3)
 * ENUM_IMAGE = ('2cb15d1d-5fc1-11d2-abe1-00a0c911f518', 3)
 * REG_CREATE_KCB = ('ae53722e-c863-11d2-8659-00c04fa321a1', 22)             # <<<<<<<<<<<<<<
 * REG_DELETE_KCB = ('ae53722e-c863-11d2-8659-00c04fa321a1', 23)
 * 
 */
  if (PyDict_SetItem(__pyx_d, __pyx_n_s_REG_CREATE_KCB, __pyx_tuple__12) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 44; __pyx_clineno = __LINE__; goto __pyx_L1_error;}

  /* "kstreamc.pyx":45
 * ENUM_IMAGE = ('2cb15d1d-5fc1-11d2-abe1-00a0c911f518', 3)
 * REG_CREATE_KCB = ('ae53722e-c863-11d2-8659-00c04fa321a1', 22)
 * REG_DELETE_KCB = ('ae53722e-c863-11d2-8659-00c04fa321a1', 23)             # <<<<<<<<<<<<<<
 * 
 * 
 */
  if (PyDict_SetItem(__pyx_d, __pyx_n_s_REG_DELETE_KCB, __pyx_tuple__13) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 45; __pyx_clineno = __LINE__; goto __pyx_L1_error;}

  /* "kstreamc.pyx":1
 * # Copyright 2015 by Nedim Sabic (RabbitStack)             # <<<<<<<<<<<<<<
 * # http://rabbitstack.github.io
 * # All Rights Reserved.
 */
  __pyx_t_2 = PyDict_New(); if (unlikely(!__pyx_t_2)) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_GOTREF(__pyx_t_2);
  if (PyDict_SetItem(__pyx_d, __pyx_n_s_test, __pyx_t_2) < 0) {__pyx_filename = __pyx_f[0]; __pyx_lineno = 1; __pyx_clineno = __LINE__; goto __pyx_L1_error;}
  __Pyx_DECREF(__pyx_t_2); __pyx_t_2 = 0;

  /*--- Wrapped vars code ---*/

  goto __pyx_L0;
  __pyx_L1_error:;
  __Pyx_XDECREF(__pyx_t_1);
  __Pyx_XDECREF(__pyx_t_2);
  if (__pyx_m) {
    if (__pyx_d) {
      __Pyx_AddTraceback("init kstreamc", __pyx_clineno, __pyx_lineno, __pyx_filename);
    }
    Py_DECREF(__pyx_m); __pyx_m = 0;
  } else if (!PyErr_Occurred()) {
    PyErr_SetString(PyExc_ImportError, "init kstreamc");
  }
  __pyx_L0:;
  __Pyx_RefNannyFinishContext();
  #if PY_MAJOR_VERSION < 3
  return;
  #else
  return __pyx_m;
  #endif
}

/* --- Runtime support code --- */
#if CYTHON_REFNANNY
static __Pyx_RefNannyAPIStruct *__Pyx_RefNannyImportAPI(const char *modname) {
    PyObject *m = NULL, *p = NULL;
    void *r = NULL;
    m = PyImport_ImportModule((char *)modname);
    if (!m) goto end;
    p = PyObject_GetAttrString(m, (char *)"RefNannyAPI");
    if (!p) goto end;
    r = PyLong_AsVoidPtr(p);
end:
    Py_XDECREF(p);
    Py_XDECREF(m);
    return (__Pyx_RefNannyAPIStruct *)r;
}
#endif

static PyObject *__Pyx_GetBuiltinName(PyObject *name) {
    PyObject* result = __Pyx_PyObject_GetAttrStr(__pyx_b, name);
    if (unlikely(!result)) {
        PyErr_Format(PyExc_NameError,
#if PY_MAJOR_VERSION >= 3
            "name '%U' is not defined", name);
#else
            "name '%.200s' is not defined", PyString_AS_STRING(name));
#endif
    }
    return result;
}

static void __Pyx_RaiseArgtupleInvalid(
    const char* func_name,
    int exact,
    Py_ssize_t num_min,
    Py_ssize_t num_max,
    Py_ssize_t num_found)
{
    Py_ssize_t num_expected;
    const char *more_or_less;
    if (num_found < num_min) {
        num_expected = num_min;
        more_or_less = "at least";
    } else {
        num_expected = num_max;
        more_or_less = "at most";
    }
    if (exact) {
        more_or_less = "exactly";
    }
    PyErr_Format(PyExc_TypeError,
                 "%.200s() takes %.8s %" CYTHON_FORMAT_SSIZE_T "d positional argument%.1s (%" CYTHON_FORMAT_SSIZE_T "d given)",
                 func_name, more_or_less, num_expected,
                 (num_expected == 1) ? "" : "s", num_found);
}

static void __Pyx_RaiseDoubleKeywordsError(
    const char* func_name,
    PyObject* kw_name)
{
    PyErr_Format(PyExc_TypeError,
        #if PY_MAJOR_VERSION >= 3
        "%s() got multiple values for keyword argument '%U'", func_name, kw_name);
        #else
        "%s() got multiple values for keyword argument '%s'", func_name,
        PyString_AsString(kw_name));
        #endif
}

static int __Pyx_ParseOptionalKeywords(
    PyObject *kwds,
    PyObject **argnames[],
    PyObject *kwds2,
    PyObject *values[],
    Py_ssize_t num_pos_args,
    const char* function_name)
{
    PyObject *key = 0, *value = 0;
    Py_ssize_t pos = 0;
    PyObject*** name;
    PyObject*** first_kw_arg = argnames + num_pos_args;
    while (PyDict_Next(kwds, &pos, &key, &value)) {
        name = first_kw_arg;
        while (*name && (**name != key)) name++;
        if (*name) {
            values[name-argnames] = value;
            continue;
        }
        name = first_kw_arg;
        #if PY_MAJOR_VERSION < 3
        if (likely(PyString_CheckExact(key)) || likely(PyString_Check(key))) {
            while (*name) {
                if ((CYTHON_COMPILING_IN_PYPY || PyString_GET_SIZE(**name) == PyString_GET_SIZE(key))
                        && _PyString_Eq(**name, key)) {
                    values[name-argnames] = value;
                    break;
                }
                name++;
            }
            if (*name) continue;
            else {
                PyObject*** argname = argnames;
                while (argname != first_kw_arg) {
                    if ((**argname == key) || (
                            (CYTHON_COMPILING_IN_PYPY || PyString_GET_SIZE(**argname) == PyString_GET_SIZE(key))
                             && _PyString_Eq(**argname, key))) {
                        goto arg_passed_twice;
                    }
                    argname++;
                }
            }
        } else
        #endif
        if (likely(PyUnicode_Check(key))) {
            while (*name) {
                int cmp = (**name == key) ? 0 :
                #if !CYTHON_COMPILING_IN_PYPY && PY_MAJOR_VERSION >= 3
                    (PyUnicode_GET_SIZE(**name) != PyUnicode_GET_SIZE(key)) ? 1 :
                #endif
                    PyUnicode_Compare(**name, key);
                if (cmp < 0 && unlikely(PyErr_Occurred())) goto bad;
                if (cmp == 0) {
                    values[name-argnames] = value;
                    break;
                }
                name++;
            }
            if (*name) continue;
            else {
                PyObject*** argname = argnames;
                while (argname != first_kw_arg) {
                    int cmp = (**argname == key) ? 0 :
                    #if !CYTHON_COMPILING_IN_PYPY && PY_MAJOR_VERSION >= 3
                        (PyUnicode_GET_SIZE(**argname) != PyUnicode_GET_SIZE(key)) ? 1 :
                    #endif
                        PyUnicode_Compare(**argname, key);
                    if (cmp < 0 && unlikely(PyErr_Occurred())) goto bad;
                    if (cmp == 0) goto arg_passed_twice;
                    argname++;
                }
            }
        } else
            goto invalid_keyword_type;
        if (kwds2) {
            if (unlikely(PyDict_SetItem(kwds2, key, value))) goto bad;
        } else {
            goto invalid_keyword;
        }
    }
    return 0;
arg_passed_twice:
    __Pyx_RaiseDoubleKeywordsError(function_name, key);
    goto bad;
invalid_keyword_type:
    PyErr_Format(PyExc_TypeError,
        "%.200s() keywords must be strings", function_name);
    goto bad;
invalid_keyword:
    PyErr_Format(PyExc_TypeError,
    #if PY_MAJOR_VERSION < 3
        "%.200s() got an unexpected keyword argument '%.200s'",
        function_name, PyString_AsString(key));
    #else
        "%s() got an unexpected keyword argument '%U'",
        function_name, key);
    #endif
bad:
    return -1;
}

static CYTHON_INLINE PyObject *__Pyx_GetModuleGlobalName(PyObject *name) {
    PyObject *result;
#if CYTHON_COMPILING_IN_CPYTHON
    result = PyDict_GetItem(__pyx_d, name);
    if (likely(result)) {
        Py_INCREF(result);
    } else {
#else
    result = PyObject_GetItem(__pyx_d, name);
    if (!result) {
        PyErr_Clear();
#endif
        result = __Pyx_GetBuiltinName(name);
    }
    return result;
}

#if CYTHON_COMPILING_IN_CPYTHON
static CYTHON_INLINE PyObject* __Pyx_PyObject_Call(PyObject *func, PyObject *arg, PyObject *kw) {
    PyObject *result;
    ternaryfunc call = func->ob_type->tp_call;
    if (unlikely(!call))
        return PyObject_Call(func, arg, kw);
    if (unlikely(Py_EnterRecursiveCall((char*)" while calling a Python object")))
        return NULL;
    result = (*call)(func, arg, kw);
    Py_LeaveRecursiveCall();
    if (unlikely(!result) && unlikely(!PyErr_Occurred())) {
        PyErr_SetString(
            PyExc_SystemError,
            "NULL result without error in PyObject_Call");
    }
    return result;
}
#endif

#if CYTHON_COMPILING_IN_CPYTHON
static CYTHON_INLINE PyObject* __Pyx_PyObject_CallMethO(PyObject *func, PyObject *arg) {
    PyObject *self, *result;
    PyCFunction cfunc;
    cfunc = PyCFunction_GET_FUNCTION(func);
    self = PyCFunction_GET_SELF(func);
    if (unlikely(Py_EnterRecursiveCall((char*)" while calling a Python object")))
        return NULL;
    result = cfunc(self, arg);
    Py_LeaveRecursiveCall();
    if (unlikely(!result) && unlikely(!PyErr_Occurred())) {
        PyErr_SetString(
            PyExc_SystemError,
            "NULL result without error in PyObject_Call");
    }
    return result;
}
#endif

#if CYTHON_COMPILING_IN_CPYTHON
static PyObject* __Pyx__PyObject_CallOneArg(PyObject *func, PyObject *arg) {
    PyObject *result;
    PyObject *args = PyTuple_New(1);
    if (unlikely(!args)) return NULL;
    Py_INCREF(arg);
    PyTuple_SET_ITEM(args, 0, arg);
    result = __Pyx_PyObject_Call(func, args, NULL);
    Py_DECREF(args);
    return result;
}
static CYTHON_INLINE PyObject* __Pyx_PyObject_CallOneArg(PyObject *func, PyObject *arg) {
#ifdef __Pyx_CyFunction_USED
    if (likely(PyCFunction_Check(func) || PyObject_TypeCheck(func, __pyx_CyFunctionType))) {
#else
    if (likely(PyCFunction_Check(func))) {
#endif
        if (likely(PyCFunction_GET_FLAGS(func) & METH_O)) {
            return __Pyx_PyObject_CallMethO(func, arg);
        }
    }
    return __Pyx__PyObject_CallOneArg(func, arg);
}
#else
static CYTHON_INLINE PyObject* __Pyx_PyObject_CallOneArg(PyObject *func, PyObject *arg) {
    PyObject *result;
    PyObject *args = PyTuple_Pack(1, arg);
    if (unlikely(!args)) return NULL;
    result = __Pyx_PyObject_Call(func, args, NULL);
    Py_DECREF(args);
    return result;
}
#endif

#if CYTHON_COMPILING_IN_CPYTHON
static CYTHON_INLINE PyObject* __Pyx_PyObject_CallNoArg(PyObject *func) {
#ifdef __Pyx_CyFunction_USED
    if (likely(PyCFunction_Check(func) || PyObject_TypeCheck(func, __pyx_CyFunctionType))) {
#else
    if (likely(PyCFunction_Check(func))) {
#endif
        if (likely(PyCFunction_GET_FLAGS(func) & METH_NOARGS)) {
            return __Pyx_PyObject_CallMethO(func, NULL);
        }
    }
    return __Pyx_PyObject_Call(func, __pyx_empty_tuple, NULL);
}
#endif

static CYTHON_INLINE void __Pyx_ExceptionSave(PyObject **type, PyObject **value, PyObject **tb) {
#if CYTHON_COMPILING_IN_CPYTHON
    PyThreadState *tstate = PyThreadState_GET();
    *type = tstate->exc_type;
    *value = tstate->exc_value;
    *tb = tstate->exc_traceback;
    Py_XINCREF(*type);
    Py_XINCREF(*value);
    Py_XINCREF(*tb);
#else
    PyErr_GetExcInfo(type, value, tb);
#endif
}
static void __Pyx_ExceptionReset(PyObject *type, PyObject *value, PyObject *tb) {
#if CYTHON_COMPILING_IN_CPYTHON
    PyObject *tmp_type, *tmp_value, *tmp_tb;
    PyThreadState *tstate = PyThreadState_GET();
    tmp_type = tstate->exc_type;
    tmp_value = tstate->exc_value;
    tmp_tb = tstate->exc_traceback;
    tstate->exc_type = type;
    tstate->exc_value = value;
    tstate->exc_traceback = tb;
    Py_XDECREF(tmp_type);
    Py_XDECREF(tmp_value);
    Py_XDECREF(tmp_tb);
#else
    PyErr_SetExcInfo(type, value, tb);
#endif
}

static int __Pyx_GetException(PyObject **type, PyObject **value, PyObject **tb) {
    PyObject *local_type, *local_value, *local_tb;
#if CYTHON_COMPILING_IN_CPYTHON
    PyObject *tmp_type, *tmp_value, *tmp_tb;
    PyThreadState *tstate = PyThreadState_GET();
    local_type = tstate->curexc_type;
    local_value = tstate->curexc_value;
    local_tb = tstate->curexc_traceback;
    tstate->curexc_type = 0;
    tstate->curexc_value = 0;
    tstate->curexc_traceback = 0;
#else
    PyErr_Fetch(&local_type, &local_value, &local_tb);
#endif
    PyErr_NormalizeException(&local_type, &local_value, &local_tb);
#if CYTHON_COMPILING_IN_CPYTHON
    if (unlikely(tstate->curexc_type))
#else
    if (unlikely(PyErr_Occurred()))
#endif
        goto bad;
    #if PY_MAJOR_VERSION >= 3
    if (local_tb) {
        if (unlikely(PyException_SetTraceback(local_value, local_tb) < 0))
            goto bad;
    }
    #endif
    Py_XINCREF(local_tb);
    Py_XINCREF(local_type);
    Py_XINCREF(local_value);
    *type = local_type;
    *value = local_value;
    *tb = local_tb;
#if CYTHON_COMPILING_IN_CPYTHON
    tmp_type = tstate->exc_type;
    tmp_value = tstate->exc_value;
    tmp_tb = tstate->exc_traceback;
    tstate->exc_type = local_type;
    tstate->exc_value = local_value;
    tstate->exc_traceback = local_tb;
    Py_XDECREF(tmp_type);
    Py_XDECREF(tmp_value);
    Py_XDECREF(tmp_tb);
#else
    PyErr_SetExcInfo(local_type, local_value, local_tb);
#endif
    return 0;
bad:
    *type = 0;
    *value = 0;
    *tb = 0;
    Py_XDECREF(local_type);
    Py_XDECREF(local_value);
    Py_XDECREF(local_tb);
    return -1;
}

static CYTHON_INLINE void __Pyx_ErrRestore(PyObject *type, PyObject *value, PyObject *tb) {
#if CYTHON_COMPILING_IN_CPYTHON
    PyObject *tmp_type, *tmp_value, *tmp_tb;
    PyThreadState *tstate = PyThreadState_GET();
    tmp_type = tstate->curexc_type;
    tmp_value = tstate->curexc_value;
    tmp_tb = tstate->curexc_traceback;
    tstate->curexc_type = type;
    tstate->curexc_value = value;
    tstate->curexc_traceback = tb;
    Py_XDECREF(tmp_type);
    Py_XDECREF(tmp_value);
    Py_XDECREF(tmp_tb);
#else
    PyErr_Restore(type, value, tb);
#endif
}
static CYTHON_INLINE void __Pyx_ErrFetch(PyObject **type, PyObject **value, PyObject **tb) {
#if CYTHON_COMPILING_IN_CPYTHON
    PyThreadState *tstate = PyThreadState_GET();
    *type = tstate->curexc_type;
    *value = tstate->curexc_value;
    *tb = tstate->curexc_traceback;
    tstate->curexc_type = 0;
    tstate->curexc_value = 0;
    tstate->curexc_traceback = 0;
#else
    PyErr_Fetch(type, value, tb);
#endif
}

#if PY_MAJOR_VERSION < 3
static void __Pyx_Raise(PyObject *type, PyObject *value, PyObject *tb,
                        CYTHON_UNUSED PyObject *cause) {
    Py_XINCREF(type);
    if (!value || value == Py_None)
        value = NULL;
    else
        Py_INCREF(value);
    if (!tb || tb == Py_None)
        tb = NULL;
    else {
        Py_INCREF(tb);
        if (!PyTraceBack_Check(tb)) {
            PyErr_SetString(PyExc_TypeError,
                "raise: arg 3 must be a traceback or None");
            goto raise_error;
        }
    }
    if (PyType_Check(type)) {
#if CYTHON_COMPILING_IN_PYPY
        if (!value) {
            Py_INCREF(Py_None);
            value = Py_None;
        }
#endif
        PyErr_NormalizeException(&type, &value, &tb);
    } else {
        if (value) {
            PyErr_SetString(PyExc_TypeError,
                "instance exception may not have a separate value");
            goto raise_error;
        }
        value = type;
        type = (PyObject*) Py_TYPE(type);
        Py_INCREF(type);
        if (!PyType_IsSubtype((PyTypeObject *)type, (PyTypeObject *)PyExc_BaseException)) {
            PyErr_SetString(PyExc_TypeError,
                "raise: exception class must be a subclass of BaseException");
            goto raise_error;
        }
    }
    __Pyx_ErrRestore(type, value, tb);
    return;
raise_error:
    Py_XDECREF(value);
    Py_XDECREF(type);
    Py_XDECREF(tb);
    return;
}
#else
static void __Pyx_Raise(PyObject *type, PyObject *value, PyObject *tb, PyObject *cause) {
    PyObject* owned_instance = NULL;
    if (tb == Py_None) {
        tb = 0;
    } else if (tb && !PyTraceBack_Check(tb)) {
        PyErr_SetString(PyExc_TypeError,
            "raise: arg 3 must be a traceback or None");
        goto bad;
    }
    if (value == Py_None)
        value = 0;
    if (PyExceptionInstance_Check(type)) {
        if (value) {
            PyErr_SetString(PyExc_TypeError,
                "instance exception may not have a separate value");
            goto bad;
        }
        value = type;
        type = (PyObject*) Py_TYPE(value);
    } else if (PyExceptionClass_Check(type)) {
        PyObject *instance_class = NULL;
        if (value && PyExceptionInstance_Check(value)) {
            instance_class = (PyObject*) Py_TYPE(value);
            if (instance_class != type) {
                int is_subclass = PyObject_IsSubclass(instance_class, type);
                if (!is_subclass) {
                    instance_class = NULL;
                } else if (unlikely(is_subclass == -1)) {
                    goto bad;
                } else {
                    type = instance_class;
                }
            }
        }
        if (!instance_class) {
            PyObject *args;
            if (!value)
                args = PyTuple_New(0);
            else if (PyTuple_Check(value)) {
                Py_INCREF(value);
                args = value;
            } else
                args = PyTuple_Pack(1, value);
            if (!args)
                goto bad;
            owned_instance = PyObject_Call(type, args, NULL);
            Py_DECREF(args);
            if (!owned_instance)
                goto bad;
            value = owned_instance;
            if (!PyExceptionInstance_Check(value)) {
                PyErr_Format(PyExc_TypeError,
                             "calling %R should have returned an instance of "
                             "BaseException, not %R",
                             type, Py_TYPE(value));
                goto bad;
            }
        }
    } else {
        PyErr_SetString(PyExc_TypeError,
            "raise: exception class must be a subclass of BaseException");
        goto bad;
    }
#if PY_VERSION_HEX >= 0x03030000
    if (cause) {
#else
    if (cause && cause != Py_None) {
#endif
        PyObject *fixed_cause;
        if (cause == Py_None) {
            fixed_cause = NULL;
        } else if (PyExceptionClass_Check(cause)) {
            fixed_cause = PyObject_CallObject(cause, NULL);
            if (fixed_cause == NULL)
                goto bad;
        } else if (PyExceptionInstance_Check(cause)) {
            fixed_cause = cause;
            Py_INCREF(fixed_cause);
        } else {
            PyErr_SetString(PyExc_TypeError,
                            "exception causes must derive from "
                            "BaseException");
            goto bad;
        }
        PyException_SetCause(value, fixed_cause);
    }
    PyErr_SetObject(type, value);
    if (tb) {
#if CYTHON_COMPILING_IN_PYPY
        PyObject *tmp_type, *tmp_value, *tmp_tb;
        PyErr_Fetch(&tmp_type, &tmp_value, &tmp_tb);
        Py_INCREF(tb);
        PyErr_Restore(tmp_type, tmp_value, tb);
        Py_XDECREF(tmp_tb);
#else
        PyThreadState *tstate = PyThreadState_GET();
        PyObject* tmp_tb = tstate->curexc_traceback;
        if (tb != tmp_tb) {
            Py_INCREF(tb);
            tstate->curexc_traceback = tb;
            Py_XDECREF(tmp_tb);
        }
#endif
    }
bad:
    Py_XDECREF(owned_instance);
    return;
}
#endif

static PyObject* __Pyx_PyObject_CallMethod1(PyObject* obj, PyObject* method_name, PyObject* arg) {
    PyObject *method, *result = NULL;
    method = __Pyx_PyObject_GetAttrStr(obj, method_name);
    if (unlikely(!method)) goto bad;
#if CYTHON_COMPILING_IN_CPYTHON
    if (likely(PyMethod_Check(method))) {
        PyObject *self = PyMethod_GET_SELF(method);
        if (likely(self)) {
            PyObject *args;
            PyObject *function = PyMethod_GET_FUNCTION(method);
            args = PyTuple_New(2);
            if (unlikely(!args)) goto bad;
            Py_INCREF(self);
            PyTuple_SET_ITEM(args, 0, self);
            Py_INCREF(arg);
            PyTuple_SET_ITEM(args, 1, arg);
            Py_INCREF(function);
            Py_DECREF(method); method = NULL;
            result = __Pyx_PyObject_Call(function, args, NULL);
            Py_DECREF(args);
            Py_DECREF(function);
            return result;
        }
    }
#endif
    result = __Pyx_PyObject_CallOneArg(method, arg);
bad:
    Py_XDECREF(method);
    return result;
}

static CYTHON_INLINE int __Pyx_PyObject_Append(PyObject* L, PyObject* x) {
    if (likely(PyList_CheckExact(L))) {
        if (unlikely(__Pyx_PyList_Append(L, x) < 0)) return -1;
    } else {
        PyObject* retval = __Pyx_PyObject_CallMethod1(L, __pyx_n_s_append, x);
        if (unlikely(!retval))
            return -1;
        Py_DECREF(retval);
    }
    return 0;
}

static CYTHON_INLINE void __Pyx_RaiseClosureNameError(const char *varname) {
    PyErr_Format(PyExc_NameError, "free variable '%s' referenced before assignment in enclosing scope", varname);
}

static PyTypeObject* __Pyx_FetchCommonType(PyTypeObject* type) {
    PyObject* fake_module;
    PyTypeObject* cached_type = NULL;
    fake_module = PyImport_AddModule((char*) "_cython_" CYTHON_ABI);
    if (!fake_module) return NULL;
    Py_INCREF(fake_module);
    cached_type = (PyTypeObject*) PyObject_GetAttrString(fake_module, type->tp_name);
    if (cached_type) {
        if (!PyType_Check((PyObject*)cached_type)) {
            PyErr_Format(PyExc_TypeError,
                "Shared Cython type %.200s is not a type object",
                type->tp_name);
            goto bad;
        }
        if (cached_type->tp_basicsize != type->tp_basicsize) {
            PyErr_Format(PyExc_TypeError,
                "Shared Cython type %.200s has the wrong size, try recompiling",
                type->tp_name);
            goto bad;
        }
    } else {
        if (!PyErr_ExceptionMatches(PyExc_AttributeError)) goto bad;
        PyErr_Clear();
        if (PyType_Ready(type) < 0) goto bad;
        if (PyObject_SetAttrString(fake_module, type->tp_name, (PyObject*) type) < 0)
            goto bad;
        Py_INCREF(type);
        cached_type = type;
    }
done:
    Py_DECREF(fake_module);
    return cached_type;
bad:
    Py_XDECREF(cached_type);
    cached_type = NULL;
    goto done;
}

static PyObject *
__Pyx_CyFunction_get_doc(__pyx_CyFunctionObject *op, CYTHON_UNUSED void *closure)
{
    if (unlikely(op->func_doc == NULL)) {
        if (op->func.m_ml->ml_doc) {
#if PY_MAJOR_VERSION >= 3
            op->func_doc = PyUnicode_FromString(op->func.m_ml->ml_doc);
#else
            op->func_doc = PyString_FromString(op->func.m_ml->ml_doc);
#endif
            if (unlikely(op->func_doc == NULL))
                return NULL;
        } else {
            Py_INCREF(Py_None);
            return Py_None;
        }
    }
    Py_INCREF(op->func_doc);
    return op->func_doc;
}
static int
__Pyx_CyFunction_set_doc(__pyx_CyFunctionObject *op, PyObject *value)
{
    PyObject *tmp = op->func_doc;
    if (value == NULL) {
        value = Py_None;
    }
    Py_INCREF(value);
    op->func_doc = value;
    Py_XDECREF(tmp);
    return 0;
}
static PyObject *
__Pyx_CyFunction_get_name(__pyx_CyFunctionObject *op)
{
    if (unlikely(op->func_name == NULL)) {
#if PY_MAJOR_VERSION >= 3
        op->func_name = PyUnicode_InternFromString(op->func.m_ml->ml_name);
#else
        op->func_name = PyString_InternFromString(op->func.m_ml->ml_name);
#endif
        if (unlikely(op->func_name == NULL))
            return NULL;
    }
    Py_INCREF(op->func_name);
    return op->func_name;
}
static int
__Pyx_CyFunction_set_name(__pyx_CyFunctionObject *op, PyObject *value)
{
    PyObject *tmp;
#if PY_MAJOR_VERSION >= 3
    if (unlikely(value == NULL || !PyUnicode_Check(value))) {
#else
    if (unlikely(value == NULL || !PyString_Check(value))) {
#endif
        PyErr_SetString(PyExc_TypeError,
                        "__name__ must be set to a string object");
        return -1;
    }
    tmp = op->func_name;
    Py_INCREF(value);
    op->func_name = value;
    Py_XDECREF(tmp);
    return 0;
}
static PyObject *
__Pyx_CyFunction_get_qualname(__pyx_CyFunctionObject *op)
{
    Py_INCREF(op->func_qualname);
    return op->func_qualname;
}
static int
__Pyx_CyFunction_set_qualname(__pyx_CyFunctionObject *op, PyObject *value)
{
    PyObject *tmp;
#if PY_MAJOR_VERSION >= 3
    if (unlikely(value == NULL || !PyUnicode_Check(value))) {
#else
    if (unlikely(value == NULL || !PyString_Check(value))) {
#endif
        PyErr_SetString(PyExc_TypeError,
                        "__qualname__ must be set to a string object");
        return -1;
    }
    tmp = op->func_qualname;
    Py_INCREF(value);
    op->func_qualname = value;
    Py_XDECREF(tmp);
    return 0;
}
static PyObject *
__Pyx_CyFunction_get_self(__pyx_CyFunctionObject *m, CYTHON_UNUSED void *closure)
{
    PyObject *self;
    self = m->func_closure;
    if (self == NULL)
        self = Py_None;
    Py_INCREF(self);
    return self;
}
static PyObject *
__Pyx_CyFunction_get_dict(__pyx_CyFunctionObject *op)
{
    if (unlikely(op->func_dict == NULL)) {
        op->func_dict = PyDict_New();
        if (unlikely(op->func_dict == NULL))
            return NULL;
    }
    Py_INCREF(op->func_dict);
    return op->func_dict;
}
static int
__Pyx_CyFunction_set_dict(__pyx_CyFunctionObject *op, PyObject *value)
{
    PyObject *tmp;
    if (unlikely(value == NULL)) {
        PyErr_SetString(PyExc_TypeError,
               "function's dictionary may not be deleted");
        return -1;
    }
    if (unlikely(!PyDict_Check(value))) {
        PyErr_SetString(PyExc_TypeError,
               "setting function's dictionary to a non-dict");
        return -1;
    }
    tmp = op->func_dict;
    Py_INCREF(value);
    op->func_dict = value;
    Py_XDECREF(tmp);
    return 0;
}
static PyObject *
__Pyx_CyFunction_get_globals(__pyx_CyFunctionObject *op)
{
    Py_INCREF(op->func_globals);
    return op->func_globals;
}
static PyObject *
__Pyx_CyFunction_get_closure(CYTHON_UNUSED __pyx_CyFunctionObject *op)
{
    Py_INCREF(Py_None);
    return Py_None;
}
static PyObject *
__Pyx_CyFunction_get_code(__pyx_CyFunctionObject *op)
{
    PyObject* result = (op->func_code) ? op->func_code : Py_None;
    Py_INCREF(result);
    return result;
}
static int
__Pyx_CyFunction_init_defaults(__pyx_CyFunctionObject *op) {
    int result = 0;
    PyObject *res = op->defaults_getter((PyObject *) op);
    if (unlikely(!res))
        return -1;
    #if CYTHON_COMPILING_IN_CPYTHON
    op->defaults_tuple = PyTuple_GET_ITEM(res, 0);
    Py_INCREF(op->defaults_tuple);
    op->defaults_kwdict = PyTuple_GET_ITEM(res, 1);
    Py_INCREF(op->defaults_kwdict);
    #else
    op->defaults_tuple = PySequence_ITEM(res, 0);
    if (unlikely(!op->defaults_tuple)) result = -1;
    else {
        op->defaults_kwdict = PySequence_ITEM(res, 1);
        if (unlikely(!op->defaults_kwdict)) result = -1;
    }
    #endif
    Py_DECREF(res);
    return result;
}
static int
__Pyx_CyFunction_set_defaults(__pyx_CyFunctionObject *op, PyObject* value) {
    PyObject* tmp;
    if (!value) {
        value = Py_None;
    } else if (value != Py_None && !PyTuple_Check(value)) {
        PyErr_SetString(PyExc_TypeError,
                        "__defaults__ must be set to a tuple object");
        return -1;
    }
    Py_INCREF(value);
    tmp = op->defaults_tuple;
    op->defaults_tuple = value;
    Py_XDECREF(tmp);
    return 0;
}
static PyObject *
__Pyx_CyFunction_get_defaults(__pyx_CyFunctionObject *op) {
    PyObject* result = op->defaults_tuple;
    if (unlikely(!result)) {
        if (op->defaults_getter) {
            if (__Pyx_CyFunction_init_defaults(op) < 0) return NULL;
            result = op->defaults_tuple;
        } else {
            result = Py_None;
        }
    }
    Py_INCREF(result);
    return result;
}
static int
__Pyx_CyFunction_set_kwdefaults(__pyx_CyFunctionObject *op, PyObject* value) {
    PyObject* tmp;
    if (!value) {
        value = Py_None;
    } else if (value != Py_None && !PyDict_Check(value)) {
        PyErr_SetString(PyExc_TypeError,
                        "__kwdefaults__ must be set to a dict object");
        return -1;
    }
    Py_INCREF(value);
    tmp = op->defaults_kwdict;
    op->defaults_kwdict = value;
    Py_XDECREF(tmp);
    return 0;
}
static PyObject *
__Pyx_CyFunction_get_kwdefaults(__pyx_CyFunctionObject *op) {
    PyObject* result = op->defaults_kwdict;
    if (unlikely(!result)) {
        if (op->defaults_getter) {
            if (__Pyx_CyFunction_init_defaults(op) < 0) return NULL;
            result = op->defaults_kwdict;
        } else {
            result = Py_None;
        }
    }
    Py_INCREF(result);
    return result;
}
static int
__Pyx_CyFunction_set_annotations(__pyx_CyFunctionObject *op, PyObject* value) {
    PyObject* tmp;
    if (!value || value == Py_None) {
        value = NULL;
    } else if (!PyDict_Check(value)) {
        PyErr_SetString(PyExc_TypeError,
                        "__annotations__ must be set to a dict object");
        return -1;
    }
    Py_XINCREF(value);
    tmp = op->func_annotations;
    op->func_annotations = value;
    Py_XDECREF(tmp);
    return 0;
}
static PyObject *
__Pyx_CyFunction_get_annotations(__pyx_CyFunctionObject *op) {
    PyObject* result = op->func_annotations;
    if (unlikely(!result)) {
        result = PyDict_New();
        if (unlikely(!result)) return NULL;
        op->func_annotations = result;
    }
    Py_INCREF(result);
    return result;
}
static PyGetSetDef __pyx_CyFunction_getsets[] = {
    {(char *) "func_doc", (getter)__Pyx_CyFunction_get_doc, (setter)__Pyx_CyFunction_set_doc, 0, 0},
    {(char *) "__doc__",  (getter)__Pyx_CyFunction_get_doc, (setter)__Pyx_CyFunction_set_doc, 0, 0},
    {(char *) "func_name", (getter)__Pyx_CyFunction_get_name, (setter)__Pyx_CyFunction_set_name, 0, 0},
    {(char *) "__name__", (getter)__Pyx_CyFunction_get_name, (setter)__Pyx_CyFunction_set_name, 0, 0},
    {(char *) "__qualname__", (getter)__Pyx_CyFunction_get_qualname, (setter)__Pyx_CyFunction_set_qualname, 0, 0},
    {(char *) "__self__", (getter)__Pyx_CyFunction_get_self, 0, 0, 0},
    {(char *) "func_dict", (getter)__Pyx_CyFunction_get_dict, (setter)__Pyx_CyFunction_set_dict, 0, 0},
    {(char *) "__dict__", (getter)__Pyx_CyFunction_get_dict, (setter)__Pyx_CyFunction_set_dict, 0, 0},
    {(char *) "func_globals", (getter)__Pyx_CyFunction_get_globals, 0, 0, 0},
    {(char *) "__globals__", (getter)__Pyx_CyFunction_get_globals, 0, 0, 0},
    {(char *) "func_closure", (getter)__Pyx_CyFunction_get_closure, 0, 0, 0},
    {(char *) "__closure__", (getter)__Pyx_CyFunction_get_closure, 0, 0, 0},
    {(char *) "func_code", (getter)__Pyx_CyFunction_get_code, 0, 0, 0},
    {(char *) "__code__", (getter)__Pyx_CyFunction_get_code, 0, 0, 0},
    {(char *) "func_defaults", (getter)__Pyx_CyFunction_get_defaults, (setter)__Pyx_CyFunction_set_defaults, 0, 0},
    {(char *) "__defaults__", (getter)__Pyx_CyFunction_get_defaults, (setter)__Pyx_CyFunction_set_defaults, 0, 0},
    {(char *) "__kwdefaults__", (getter)__Pyx_CyFunction_get_kwdefaults, (setter)__Pyx_CyFunction_set_kwdefaults, 0, 0},
    {(char *) "__annotations__", (getter)__Pyx_CyFunction_get_annotations, (setter)__Pyx_CyFunction_set_annotations, 0, 0},
    {0, 0, 0, 0, 0}
};
static PyMemberDef __pyx_CyFunction_members[] = {
    {(char *) "__module__", T_OBJECT, offsetof(__pyx_CyFunctionObject, func.m_module), PY_WRITE_RESTRICTED, 0},
    {0, 0, 0,  0, 0}
};
static PyObject *
__Pyx_CyFunction_reduce(__pyx_CyFunctionObject *m, CYTHON_UNUSED PyObject *args)
{
#if PY_MAJOR_VERSION >= 3
    return PyUnicode_FromString(m->func.m_ml->ml_name);
#else
    return PyString_FromString(m->func.m_ml->ml_name);
#endif
}
static PyMethodDef __pyx_CyFunction_methods[] = {
    {"__reduce__", (PyCFunction)__Pyx_CyFunction_reduce, METH_VARARGS, 0},
    {0, 0, 0, 0}
};
#if PY_VERSION_HEX < 0x030500A0
#define __Pyx_CyFunction_weakreflist(cyfunc) ((cyfunc)->func_weakreflist)
#else
#define __Pyx_CyFunction_weakreflist(cyfunc) ((cyfunc)->func.m_weakreflist)
#endif
static PyObject *__Pyx_CyFunction_New(PyTypeObject *type, PyMethodDef *ml, int flags, PyObject* qualname,
                                      PyObject *closure, PyObject *module, PyObject* globals, PyObject* code) {
    __pyx_CyFunctionObject *op = PyObject_GC_New(__pyx_CyFunctionObject, type);
    if (op == NULL)
        return NULL;
    op->flags = flags;
    __Pyx_CyFunction_weakreflist(op) = NULL;
    op->func.m_ml = ml;
    op->func.m_self = (PyObject *) op;
    Py_XINCREF(closure);
    op->func_closure = closure;
    Py_XINCREF(module);
    op->func.m_module = module;
    op->func_dict = NULL;
    op->func_name = NULL;
    Py_INCREF(qualname);
    op->func_qualname = qualname;
    op->func_doc = NULL;
    op->func_classobj = NULL;
    op->func_globals = globals;
    Py_INCREF(op->func_globals);
    Py_XINCREF(code);
    op->func_code = code;
    op->defaults_pyobjects = 0;
    op->defaults = NULL;
    op->defaults_tuple = NULL;
    op->defaults_kwdict = NULL;
    op->defaults_getter = NULL;
    op->func_annotations = NULL;
    PyObject_GC_Track(op);
    return (PyObject *) op;
}
static int
__Pyx_CyFunction_clear(__pyx_CyFunctionObject *m)
{
    Py_CLEAR(m->func_closure);
    Py_CLEAR(m->func.m_module);
    Py_CLEAR(m->func_dict);
    Py_CLEAR(m->func_name);
    Py_CLEAR(m->func_qualname);
    Py_CLEAR(m->func_doc);
    Py_CLEAR(m->func_globals);
    Py_CLEAR(m->func_code);
    Py_CLEAR(m->func_classobj);
    Py_CLEAR(m->defaults_tuple);
    Py_CLEAR(m->defaults_kwdict);
    Py_CLEAR(m->func_annotations);
    if (m->defaults) {
        PyObject **pydefaults = __Pyx_CyFunction_Defaults(PyObject *, m);
        int i;
        for (i = 0; i < m->defaults_pyobjects; i++)
            Py_XDECREF(pydefaults[i]);
        PyMem_Free(m->defaults);
        m->defaults = NULL;
    }
    return 0;
}
static void __Pyx_CyFunction_dealloc(__pyx_CyFunctionObject *m)
{
    PyObject_GC_UnTrack(m);
    if (__Pyx_CyFunction_weakreflist(m) != NULL)
        PyObject_ClearWeakRefs((PyObject *) m);
    __Pyx_CyFunction_clear(m);
    PyObject_GC_Del(m);
}
static int __Pyx_CyFunction_traverse(__pyx_CyFunctionObject *m, visitproc visit, void *arg)
{
    Py_VISIT(m->func_closure);
    Py_VISIT(m->func.m_module);
    Py_VISIT(m->func_dict);
    Py_VISIT(m->func_name);
    Py_VISIT(m->func_qualname);
    Py_VISIT(m->func_doc);
    Py_VISIT(m->func_globals);
    Py_VISIT(m->func_code);
    Py_VISIT(m->func_classobj);
    Py_VISIT(m->defaults_tuple);
    Py_VISIT(m->defaults_kwdict);
    if (m->defaults) {
        PyObject **pydefaults = __Pyx_CyFunction_Defaults(PyObject *, m);
        int i;
        for (i = 0; i < m->defaults_pyobjects; i++)
            Py_VISIT(pydefaults[i]);
    }
    return 0;
}
static PyObject *__Pyx_CyFunction_descr_get(PyObject *func, PyObject *obj, PyObject *type)
{
    __pyx_CyFunctionObject *m = (__pyx_CyFunctionObject *) func;
    if (m->flags & __Pyx_CYFUNCTION_STATICMETHOD) {
        Py_INCREF(func);
        return func;
    }
    if (m->flags & __Pyx_CYFUNCTION_CLASSMETHOD) {
        if (type == NULL)
            type = (PyObject *)(Py_TYPE(obj));
        return __Pyx_PyMethod_New(func, type, (PyObject *)(Py_TYPE(type)));
    }
    if (obj == Py_None)
        obj = NULL;
    return __Pyx_PyMethod_New(func, obj, type);
}
static PyObject*
__Pyx_CyFunction_repr(__pyx_CyFunctionObject *op)
{
#if PY_MAJOR_VERSION >= 3
    return PyUnicode_FromFormat("<cyfunction %U at %p>",
                                op->func_qualname, (void *)op);
#else
    return PyString_FromFormat("<cyfunction %s at %p>",
                               PyString_AsString(op->func_qualname), (void *)op);
#endif
}
#if CYTHON_COMPILING_IN_PYPY
static PyObject * __Pyx_CyFunction_Call(PyObject *func, PyObject *arg, PyObject *kw) {
    PyCFunctionObject* f = (PyCFunctionObject*)func;
    PyCFunction meth = f->m_ml->ml_meth;
    PyObject *self = f->m_self;
    Py_ssize_t size;
    switch (f->m_ml->ml_flags & (METH_VARARGS | METH_KEYWORDS | METH_NOARGS | METH_O)) {
    case METH_VARARGS:
        if (likely(kw == NULL || PyDict_Size(kw) == 0))
            return (*meth)(self, arg);
        break;
    case METH_VARARGS | METH_KEYWORDS:
        return (*(PyCFunctionWithKeywords)meth)(self, arg, kw);
    case METH_NOARGS:
        if (likely(kw == NULL || PyDict_Size(kw) == 0)) {
            size = PyTuple_GET_SIZE(arg);
            if (likely(size == 0))
                return (*meth)(self, NULL);
            PyErr_Format(PyExc_TypeError,
                "%.200s() takes no arguments (%" CYTHON_FORMAT_SSIZE_T "d given)",
                f->m_ml->ml_name, size);
            return NULL;
        }
        break;
    case METH_O:
        if (likely(kw == NULL || PyDict_Size(kw) == 0)) {
            size = PyTuple_GET_SIZE(arg);
            if (likely(size == 1)) {
                PyObject *result, *arg0 = PySequence_ITEM(arg, 0);
                if (unlikely(!arg0)) return NULL;
                result = (*meth)(self, arg0);
                Py_DECREF(arg0);
                return result;
            }
            PyErr_Format(PyExc_TypeError,
                "%.200s() takes exactly one argument (%" CYTHON_FORMAT_SSIZE_T "d given)",
                f->m_ml->ml_name, size);
            return NULL;
        }
        break;
    default:
        PyErr_SetString(PyExc_SystemError, "Bad call flags in "
                        "__Pyx_CyFunction_Call. METH_OLDARGS is no "
                        "longer supported!");
        return NULL;
    }
    PyErr_Format(PyExc_TypeError, "%.200s() takes no keyword arguments",
                 f->m_ml->ml_name);
    return NULL;
}
#else
static PyObject * __Pyx_CyFunction_Call(PyObject *func, PyObject *arg, PyObject *kw) {
	return PyCFunction_Call(func, arg, kw);
}
#endif
static PyTypeObject __pyx_CyFunctionType_type = {
    PyVarObject_HEAD_INIT(0, 0)
    "cython_function_or_method",
    sizeof(__pyx_CyFunctionObject),
    0,
    (destructor) __Pyx_CyFunction_dealloc,
    0,
    0,
    0,
#if PY_MAJOR_VERSION < 3
    0,
#else
    0,
#endif
    (reprfunc) __Pyx_CyFunction_repr,
    0,
    0,
    0,
    0,
    __Pyx_CyFunction_Call,
    0,
    0,
    0,
    0,
    Py_TPFLAGS_DEFAULT | Py_TPFLAGS_HAVE_GC,
    0,
    (traverseproc) __Pyx_CyFunction_traverse,
    (inquiry) __Pyx_CyFunction_clear,
    0,
#if PY_VERSION_HEX < 0x030500A0
    offsetof(__pyx_CyFunctionObject, func_weakreflist),
#else
    offsetof(PyCFunctionObject, m_weakreflist),
#endif
    0,
    0,
    __pyx_CyFunction_methods,
    __pyx_CyFunction_members,
    __pyx_CyFunction_getsets,
    0,
    0,
    __Pyx_CyFunction_descr_get,
    0,
    offsetof(__pyx_CyFunctionObject, func_dict),
    0,
    0,
    0,
    0,
    0,
    0,
    0,
    0,
    0,
    0,
    0,
    0,
#if PY_VERSION_HEX >= 0x030400a1
    0,
#endif
};
static int __pyx_CyFunction_init(void) {
#if !CYTHON_COMPILING_IN_PYPY
    __pyx_CyFunctionType_type.tp_call = PyCFunction_Call;
#endif
    __pyx_CyFunctionType = __Pyx_FetchCommonType(&__pyx_CyFunctionType_type);
    if (__pyx_CyFunctionType == NULL) {
        return -1;
    }
    return 0;
}
static CYTHON_INLINE void *__Pyx_CyFunction_InitDefaults(PyObject *func, size_t size, int pyobjects) {
    __pyx_CyFunctionObject *m = (__pyx_CyFunctionObject *) func;
    m->defaults = PyMem_Malloc(size);
    if (!m->defaults)
        return PyErr_NoMemory();
    memset(m->defaults, 0, size);
    m->defaults_pyobjects = pyobjects;
    return m->defaults;
}
static CYTHON_INLINE void __Pyx_CyFunction_SetDefaultsTuple(PyObject *func, PyObject *tuple) {
    __pyx_CyFunctionObject *m = (__pyx_CyFunctionObject *) func;
    m->defaults_tuple = tuple;
    Py_INCREF(tuple);
}
static CYTHON_INLINE void __Pyx_CyFunction_SetDefaultsKwDict(PyObject *func, PyObject *dict) {
    __pyx_CyFunctionObject *m = (__pyx_CyFunctionObject *) func;
    m->defaults_kwdict = dict;
    Py_INCREF(dict);
}
static CYTHON_INLINE void __Pyx_CyFunction_SetAnnotationsDict(PyObject *func, PyObject *dict) {
    __pyx_CyFunctionObject *m = (__pyx_CyFunctionObject *) func;
    m->func_annotations = dict;
    Py_INCREF(dict);
}

static CYTHON_INLINE PyObject* __Pyx_decode_c_bytes(
         const char* cstring, Py_ssize_t length, Py_ssize_t start, Py_ssize_t stop,
         const char* encoding, const char* errors,
         PyObject* (*decode_func)(const char *s, Py_ssize_t size, const char *errors)) {
    if (unlikely((start < 0) | (stop < 0))) {
        if (start < 0) {
            start += length;
            if (start < 0)
                start = 0;
        }
        if (stop < 0)
            stop += length;
    }
    if (stop > length)
        stop = length;
    length = stop - start;
    if (unlikely(length <= 0))
        return PyUnicode_FromUnicode(NULL, 0);
    cstring += start;
    if (decode_func) {
        return decode_func(cstring, length, errors);
    } else {
        return PyUnicode_Decode(cstring, length, encoding, errors);
    }
}

static CYTHON_INLINE PyObject* __Pyx_decode_c_string(
         const char* cstring, Py_ssize_t start, Py_ssize_t stop,
         const char* encoding, const char* errors,
         PyObject* (*decode_func)(const char *s, Py_ssize_t size, const char *errors)) {
    Py_ssize_t length;
    if (unlikely((start < 0) | (stop < 0))) {
        size_t slen = strlen(cstring);
        if (unlikely(slen > (size_t) PY_SSIZE_T_MAX)) {
            PyErr_SetString(PyExc_OverflowError,
                            "c-string too long to convert to Python");
            return NULL;
        }
        length = (Py_ssize_t) slen;
        if (start < 0) {
            start += length;
            if (start < 0)
                start = 0;
        }
        if (stop < 0)
            stop += length;
    }
    length = stop - start;
    if (unlikely(length <= 0))
        return PyUnicode_FromUnicode(NULL, 0);
    cstring += start;
    if (decode_func) {
        return decode_func(cstring, length, errors);
    } else {
        return PyUnicode_Decode(cstring, length, encoding, errors);
    }
}

#if CYTHON_USE_PYLONG_INTERNALS
  #include "longintrepr.h"
#endif

#if CYTHON_COMPILING_IN_CPYTHON
static PyObject* __Pyx_PyInt_EqObjC(PyObject *op1, PyObject *op2, CYTHON_UNUSED long intval, CYTHON_UNUSED int inplace) {
    if (op1 == op2) {
        Py_RETURN_TRUE;
    }
    #if PY_MAJOR_VERSION < 3
    if (likely(PyInt_CheckExact(op1))) {
        const long b = intval;
        long a = PyInt_AS_LONG(op1);
        if (a == b) {
            Py_RETURN_TRUE;
        } else {
            Py_RETURN_FALSE;
        }
    }
    #endif
    #if CYTHON_USE_PYLONG_INTERNALS && PY_MAJOR_VERSION >= 3
    if (likely(PyLong_CheckExact(op1))) {
        const long b = intval;
        long a;
        const digit* digits = ((PyLongObject*)op1)->ob_digit;
        const Py_ssize_t size = Py_SIZE(op1);
        if (likely(__Pyx_sst_abs(size) <= 1)) {
            a = likely(size) ? digits[0] : 0;
            if (size == -1) a = -a;
        } else {
            switch (size) {
                case -2:
                    if (8 * sizeof(long) - 1 > 2 * PyLong_SHIFT) {
                        a = -(long) (((((unsigned long)digits[1]) << PyLong_SHIFT) | (unsigned long)digits[0]));
                        break;
                    }
                case 2:
                    if (8 * sizeof(long) - 1 > 2 * PyLong_SHIFT) {
                        a = (long) (((((unsigned long)digits[1]) << PyLong_SHIFT) | (unsigned long)digits[0]));
                        break;
                    }
                case -3:
                    if (8 * sizeof(long) - 1 > 3 * PyLong_SHIFT) {
                        a = -(long) (((((((unsigned long)digits[2]) << PyLong_SHIFT) | (unsigned long)digits[1]) << PyLong_SHIFT) | (unsigned long)digits[0]));
                        break;
                    }
                case 3:
                    if (8 * sizeof(long) - 1 > 3 * PyLong_SHIFT) {
                        a = (long) (((((((unsigned long)digits[2]) << PyLong_SHIFT) | (unsigned long)digits[1]) << PyLong_SHIFT) | (unsigned long)digits[0]));
                        break;
                    }
                case -4:
                    if (8 * sizeof(long) - 1 > 4 * PyLong_SHIFT) {
                        a = -(long) (((((((((unsigned long)digits[3]) << PyLong_SHIFT) | (unsigned long)digits[2]) << PyLong_SHIFT) | (unsigned long)digits[1]) << PyLong_SHIFT) | (unsigned long)digits[0]));
                        break;
                    }
                case 4:
                    if (8 * sizeof(long) - 1 > 4 * PyLong_SHIFT) {
                        a = (long) (((((((((unsigned long)digits[3]) << PyLong_SHIFT) | (unsigned long)digits[2]) << PyLong_SHIFT) | (unsigned long)digits[1]) << PyLong_SHIFT) | (unsigned long)digits[0]));
                        break;
                    }
                #if PyLong_SHIFT < 30 && PyLong_SHIFT != 15
                default: return PyLong_Type.tp_richcompare(op1, op2, Py_EQ);
                #else
                default: Py_RETURN_FALSE;
                #endif
            }
        }
            if (a == b) {
                Py_RETURN_TRUE;
            } else {
                Py_RETURN_FALSE;
            }
    }
    #endif
    if (PyFloat_CheckExact(op1)) {
        const long b = intval;
        double a = PyFloat_AS_DOUBLE(op1);
            if ((double)a == (double)b) {
                Py_RETURN_TRUE;
            } else {
                Py_RETURN_FALSE;
            }
    }
    return PyObject_RichCompare(op1, op2, Py_EQ);
}
#endif

static CYTHON_INLINE PyObject* __Pyx_PyObject_GetSlice(PyObject* obj,
        Py_ssize_t cstart, Py_ssize_t cstop,
        PyObject** _py_start, PyObject** _py_stop, PyObject** _py_slice,
        int has_cstart, int has_cstop, CYTHON_UNUSED int wraparound) {
#if CYTHON_COMPILING_IN_CPYTHON
    PyMappingMethods* mp;
#if PY_MAJOR_VERSION < 3
    PySequenceMethods* ms = Py_TYPE(obj)->tp_as_sequence;
    if (likely(ms && ms->sq_slice)) {
        if (!has_cstart) {
            if (_py_start && (*_py_start != Py_None)) {
                cstart = __Pyx_PyIndex_AsSsize_t(*_py_start);
                if ((cstart == (Py_ssize_t)-1) && PyErr_Occurred()) goto bad;
            } else
                cstart = 0;
        }
        if (!has_cstop) {
            if (_py_stop && (*_py_stop != Py_None)) {
                cstop = __Pyx_PyIndex_AsSsize_t(*_py_stop);
                if ((cstop == (Py_ssize_t)-1) && PyErr_Occurred()) goto bad;
            } else
                cstop = PY_SSIZE_T_MAX;
        }
        if (wraparound && unlikely((cstart < 0) | (cstop < 0)) && likely(ms->sq_length)) {
            Py_ssize_t l = ms->sq_length(obj);
            if (likely(l >= 0)) {
                if (cstop < 0) {
                    cstop += l;
                    if (cstop < 0) cstop = 0;
                }
                if (cstart < 0) {
                    cstart += l;
                    if (cstart < 0) cstart = 0;
                }
            } else {
                if (PyErr_ExceptionMatches(PyExc_OverflowError))
                    PyErr_Clear();
                else
                    goto bad;
            }
        }
        return ms->sq_slice(obj, cstart, cstop);
    }
#endif
    mp = Py_TYPE(obj)->tp_as_mapping;
    if (likely(mp && mp->mp_subscript))
#endif
    {
        PyObject* result;
        PyObject *py_slice, *py_start, *py_stop;
        if (_py_slice) {
            py_slice = *_py_slice;
        } else {
            PyObject* owned_start = NULL;
            PyObject* owned_stop = NULL;
            if (_py_start) {
                py_start = *_py_start;
            } else {
                if (has_cstart) {
                    owned_start = py_start = PyInt_FromSsize_t(cstart);
                    if (unlikely(!py_start)) goto bad;
                } else
                    py_start = Py_None;
            }
            if (_py_stop) {
                py_stop = *_py_stop;
            } else {
                if (has_cstop) {
                    owned_stop = py_stop = PyInt_FromSsize_t(cstop);
                    if (unlikely(!py_stop)) {
                        Py_XDECREF(owned_start);
                        goto bad;
                    }
                } else
                    py_stop = Py_None;
            }
            py_slice = PySlice_New(py_start, py_stop, Py_None);
            Py_XDECREF(owned_start);
            Py_XDECREF(owned_stop);
            if (unlikely(!py_slice)) goto bad;
        }
#if CYTHON_COMPILING_IN_CPYTHON
        result = mp->mp_subscript(obj, py_slice);
#else
        result = PyObject_GetItem(obj, py_slice);
#endif
        if (!_py_slice) {
            Py_DECREF(py_slice);
        }
        return result;
    }
    PyErr_Format(PyExc_TypeError,
        "'%.200s' object is unsliceable", Py_TYPE(obj)->tp_name);
bad:
    return NULL;
}

static CYTHON_INLINE PyObject *__Pyx_GetItemInt_Generic(PyObject *o, PyObject* j) {
    PyObject *r;
    if (!j) return NULL;
    r = PyObject_GetItem(o, j);
    Py_DECREF(j);
    return r;
}
static CYTHON_INLINE PyObject *__Pyx_GetItemInt_List_Fast(PyObject *o, Py_ssize_t i,
                                                              CYTHON_NCP_UNUSED int wraparound,
                                                              CYTHON_NCP_UNUSED int boundscheck) {
#if CYTHON_COMPILING_IN_CPYTHON
    if (wraparound & unlikely(i < 0)) i += PyList_GET_SIZE(o);
    if ((!boundscheck) || likely((0 <= i) & (i < PyList_GET_SIZE(o)))) {
        PyObject *r = PyList_GET_ITEM(o, i);
        Py_INCREF(r);
        return r;
    }
    return __Pyx_GetItemInt_Generic(o, PyInt_FromSsize_t(i));
#else
    return PySequence_GetItem(o, i);
#endif
}
static CYTHON_INLINE PyObject *__Pyx_GetItemInt_Tuple_Fast(PyObject *o, Py_ssize_t i,
                                                              CYTHON_NCP_UNUSED int wraparound,
                                                              CYTHON_NCP_UNUSED int boundscheck) {
#if CYTHON_COMPILING_IN_CPYTHON
    if (wraparound & unlikely(i < 0)) i += PyTuple_GET_SIZE(o);
    if ((!boundscheck) || likely((0 <= i) & (i < PyTuple_GET_SIZE(o)))) {
        PyObject *r = PyTuple_GET_ITEM(o, i);
        Py_INCREF(r);
        return r;
    }
    return __Pyx_GetItemInt_Generic(o, PyInt_FromSsize_t(i));
#else
    return PySequence_GetItem(o, i);
#endif
}
static CYTHON_INLINE PyObject *__Pyx_GetItemInt_Fast(PyObject *o, Py_ssize_t i, int is_list,
                                                     CYTHON_NCP_UNUSED int wraparound,
                                                     CYTHON_NCP_UNUSED int boundscheck) {
#if CYTHON_COMPILING_IN_CPYTHON
    if (is_list || PyList_CheckExact(o)) {
        Py_ssize_t n = ((!wraparound) | likely(i >= 0)) ? i : i + PyList_GET_SIZE(o);
        if ((!boundscheck) || (likely((n >= 0) & (n < PyList_GET_SIZE(o))))) {
            PyObject *r = PyList_GET_ITEM(o, n);
            Py_INCREF(r);
            return r;
        }
    }
    else if (PyTuple_CheckExact(o)) {
        Py_ssize_t n = ((!wraparound) | likely(i >= 0)) ? i : i + PyTuple_GET_SIZE(o);
        if ((!boundscheck) || likely((n >= 0) & (n < PyTuple_GET_SIZE(o)))) {
            PyObject *r = PyTuple_GET_ITEM(o, n);
            Py_INCREF(r);
            return r;
        }
    } else {
        PySequenceMethods *m = Py_TYPE(o)->tp_as_sequence;
        if (likely(m && m->sq_item)) {
            if (wraparound && unlikely(i < 0) && likely(m->sq_length)) {
                Py_ssize_t l = m->sq_length(o);
                if (likely(l >= 0)) {
                    i += l;
                } else {
                    if (PyErr_ExceptionMatches(PyExc_OverflowError))
                        PyErr_Clear();
                    else
                        return NULL;
                }
            }
            return m->sq_item(o, i);
        }
    }
#else
    if (is_list || PySequence_Check(o)) {
        return PySequence_GetItem(o, i);
    }
#endif
    return __Pyx_GetItemInt_Generic(o, PyInt_FromSsize_t(i));
}

static int __Pyx_SetVtable(PyObject *dict, void *vtable) {
#if PY_VERSION_HEX >= 0x02070000
    PyObject *ob = PyCapsule_New(vtable, 0, 0);
#else
    PyObject *ob = PyCObject_FromVoidPtr(vtable, 0);
#endif
    if (!ob)
        goto bad;
    if (PyDict_SetItem(dict, __pyx_n_s_pyx_vtable, ob) < 0)
        goto bad;
    Py_DECREF(ob);
    return 0;
bad:
    Py_XDECREF(ob);
    return -1;
}

static PyObject *__Pyx_Import(PyObject *name, PyObject *from_list, int level) {
    PyObject *empty_list = 0;
    PyObject *module = 0;
    PyObject *global_dict = 0;
    PyObject *empty_dict = 0;
    PyObject *list;
    #if PY_VERSION_HEX < 0x03030000
    PyObject *py_import;
    py_import = __Pyx_PyObject_GetAttrStr(__pyx_b, __pyx_n_s_import);
    if (!py_import)
        goto bad;
    #endif
    if (from_list)
        list = from_list;
    else {
        empty_list = PyList_New(0);
        if (!empty_list)
            goto bad;
        list = empty_list;
    }
    global_dict = PyModule_GetDict(__pyx_m);
    if (!global_dict)
        goto bad;
    empty_dict = PyDict_New();
    if (!empty_dict)
        goto bad;
    {
        #if PY_MAJOR_VERSION >= 3
        if (level == -1) {
            if (strchr(__Pyx_MODULE_NAME, '.')) {
                #if PY_VERSION_HEX < 0x03030000
                PyObject *py_level = PyInt_FromLong(1);
                if (!py_level)
                    goto bad;
                module = PyObject_CallFunctionObjArgs(py_import,
                    name, global_dict, empty_dict, list, py_level, NULL);
                Py_DECREF(py_level);
                #else
                module = PyImport_ImportModuleLevelObject(
                    name, global_dict, empty_dict, list, 1);
                #endif
                if (!module) {
                    if (!PyErr_ExceptionMatches(PyExc_ImportError))
                        goto bad;
                    PyErr_Clear();
                }
            }
            level = 0;
        }
        #endif
        if (!module) {
            #if PY_VERSION_HEX < 0x03030000
            PyObject *py_level = PyInt_FromLong(level);
            if (!py_level)
                goto bad;
            module = PyObject_CallFunctionObjArgs(py_import,
                name, global_dict, empty_dict, list, py_level, NULL);
            Py_DECREF(py_level);
            #else
            module = PyImport_ImportModuleLevelObject(
                name, global_dict, empty_dict, list, level);
            #endif
        }
    }
bad:
    #if PY_VERSION_HEX < 0x03030000
    Py_XDECREF(py_import);
    #endif
    Py_XDECREF(empty_list);
    Py_XDECREF(empty_dict);
    return module;
}

static PyObject* __Pyx_ImportFrom(PyObject* module, PyObject* name) {
    PyObject* value = __Pyx_PyObject_GetAttrStr(module, name);
    if (unlikely(!value) && PyErr_ExceptionMatches(PyExc_AttributeError)) {
        PyErr_Format(PyExc_ImportError,
        #if PY_MAJOR_VERSION < 3
            "cannot import name %.230s", PyString_AS_STRING(name));
        #else
            "cannot import name %S", name);
        #endif
    }
    return value;
}

static int __pyx_bisect_code_objects(__Pyx_CodeObjectCacheEntry* entries, int count, int code_line) {
    int start = 0, mid = 0, end = count - 1;
    if (end >= 0 && code_line > entries[end].code_line) {
        return count;
    }
    while (start < end) {
        mid = start + (end - start) / 2;
        if (code_line < entries[mid].code_line) {
            end = mid;
        } else if (code_line > entries[mid].code_line) {
             start = mid + 1;
        } else {
            return mid;
        }
    }
    if (code_line <= entries[mid].code_line) {
        return mid;
    } else {
        return mid + 1;
    }
}
static PyCodeObject *__pyx_find_code_object(int code_line) {
    PyCodeObject* code_object;
    int pos;
    if (unlikely(!code_line) || unlikely(!__pyx_code_cache.entries)) {
        return NULL;
    }
    pos = __pyx_bisect_code_objects(__pyx_code_cache.entries, __pyx_code_cache.count, code_line);
    if (unlikely(pos >= __pyx_code_cache.count) || unlikely(__pyx_code_cache.entries[pos].code_line != code_line)) {
        return NULL;
    }
    code_object = __pyx_code_cache.entries[pos].code_object;
    Py_INCREF(code_object);
    return code_object;
}
static void __pyx_insert_code_object(int code_line, PyCodeObject* code_object) {
    int pos, i;
    __Pyx_CodeObjectCacheEntry* entries = __pyx_code_cache.entries;
    if (unlikely(!code_line)) {
        return;
    }
    if (unlikely(!entries)) {
        entries = (__Pyx_CodeObjectCacheEntry*)PyMem_Malloc(64*sizeof(__Pyx_CodeObjectCacheEntry));
        if (likely(entries)) {
            __pyx_code_cache.entries = entries;
            __pyx_code_cache.max_count = 64;
            __pyx_code_cache.count = 1;
            entries[0].code_line = code_line;
            entries[0].code_object = code_object;
            Py_INCREF(code_object);
        }
        return;
    }
    pos = __pyx_bisect_code_objects(__pyx_code_cache.entries, __pyx_code_cache.count, code_line);
    if ((pos < __pyx_code_cache.count) && unlikely(__pyx_code_cache.entries[pos].code_line == code_line)) {
        PyCodeObject* tmp = entries[pos].code_object;
        entries[pos].code_object = code_object;
        Py_DECREF(tmp);
        return;
    }
    if (__pyx_code_cache.count == __pyx_code_cache.max_count) {
        int new_max = __pyx_code_cache.max_count + 64;
        entries = (__Pyx_CodeObjectCacheEntry*)PyMem_Realloc(
            __pyx_code_cache.entries, (size_t)new_max*sizeof(__Pyx_CodeObjectCacheEntry));
        if (unlikely(!entries)) {
            return;
        }
        __pyx_code_cache.entries = entries;
        __pyx_code_cache.max_count = new_max;
    }
    for (i=__pyx_code_cache.count; i>pos; i--) {
        entries[i] = entries[i-1];
    }
    entries[pos].code_line = code_line;
    entries[pos].code_object = code_object;
    __pyx_code_cache.count++;
    Py_INCREF(code_object);
}

#include "compile.h"
#include "frameobject.h"
#include "traceback.h"
static PyCodeObject* __Pyx_CreateCodeObjectForTraceback(
            const char *funcname, int c_line,
            int py_line, const char *filename) {
    PyCodeObject *py_code = 0;
    PyObject *py_srcfile = 0;
    PyObject *py_funcname = 0;
    #if PY_MAJOR_VERSION < 3
    py_srcfile = PyString_FromString(filename);
    #else
    py_srcfile = PyUnicode_FromString(filename);
    #endif
    if (!py_srcfile) goto bad;
    if (c_line) {
        #if PY_MAJOR_VERSION < 3
        py_funcname = PyString_FromFormat( "%s (%s:%d)", funcname, __pyx_cfilenm, c_line);
        #else
        py_funcname = PyUnicode_FromFormat( "%s (%s:%d)", funcname, __pyx_cfilenm, c_line);
        #endif
    }
    else {
        #if PY_MAJOR_VERSION < 3
        py_funcname = PyString_FromString(funcname);
        #else
        py_funcname = PyUnicode_FromString(funcname);
        #endif
    }
    if (!py_funcname) goto bad;
    py_code = __Pyx_PyCode_New(
        0,
        0,
        0,
        0,
        0,
        __pyx_empty_bytes, /*PyObject *code,*/
        __pyx_empty_tuple, /*PyObject *consts,*/
        __pyx_empty_tuple, /*PyObject *names,*/
        __pyx_empty_tuple, /*PyObject *varnames,*/
        __pyx_empty_tuple, /*PyObject *freevars,*/
        __pyx_empty_tuple, /*PyObject *cellvars,*/
        py_srcfile,   /*PyObject *filename,*/
        py_funcname,  /*PyObject *name,*/
        py_line,
        __pyx_empty_bytes  /*PyObject *lnotab*/
    );
    Py_DECREF(py_srcfile);
    Py_DECREF(py_funcname);
    return py_code;
bad:
    Py_XDECREF(py_srcfile);
    Py_XDECREF(py_funcname);
    return NULL;
}
static void __Pyx_AddTraceback(const char *funcname, int c_line,
                               int py_line, const char *filename) {
    PyCodeObject *py_code = 0;
    PyFrameObject *py_frame = 0;
    py_code = __pyx_find_code_object(c_line ? c_line : py_line);
    if (!py_code) {
        py_code = __Pyx_CreateCodeObjectForTraceback(
            funcname, c_line, py_line, filename);
        if (!py_code) goto bad;
        __pyx_insert_code_object(c_line ? c_line : py_line, py_code);
    }
    py_frame = PyFrame_New(
        PyThreadState_GET(), /*PyThreadState *tstate,*/
        py_code,             /*PyCodeObject *code,*/
        __pyx_d,      /*PyObject *globals,*/
        0                    /*PyObject *locals*/
    );
    if (!py_frame) goto bad;
    py_frame->f_lineno = py_line;
    PyTraceBack_Here(py_frame);
bad:
    Py_XDECREF(py_code);
    Py_XDECREF(py_frame);
}

static CYTHON_INLINE PyObject* __Pyx_PyInt_From_ULONG(ULONG value) {
    const ULONG neg_one = (ULONG) -1, const_zero = (ULONG) 0;
    const int is_unsigned = neg_one > const_zero;
    if (is_unsigned) {
        if (sizeof(ULONG) < sizeof(long)) {
            return PyInt_FromLong((long) value);
        } else if (sizeof(ULONG) <= sizeof(unsigned long)) {
            return PyLong_FromUnsignedLong((unsigned long) value);
        } else if (sizeof(ULONG) <= sizeof(unsigned PY_LONG_LONG)) {
            return PyLong_FromUnsignedLongLong((unsigned PY_LONG_LONG) value);
        }
    } else {
        if (sizeof(ULONG) <= sizeof(long)) {
            return PyInt_FromLong((long) value);
        } else if (sizeof(ULONG) <= sizeof(PY_LONG_LONG)) {
            return PyLong_FromLongLong((PY_LONG_LONG) value);
        }
    }
    {
        int one = 1; int little = (int)*(unsigned char *)&one;
        unsigned char *bytes = (unsigned char *)&value;
        return _PyLong_FromByteArray(bytes, sizeof(ULONG),
                                     little, !is_unsigned);
    }
}

static CYTHON_INLINE PyObject* __Pyx_PyInt_From_int(int value) {
    const int neg_one = (int) -1, const_zero = (int) 0;
    const int is_unsigned = neg_one > const_zero;
    if (is_unsigned) {
        if (sizeof(int) < sizeof(long)) {
            return PyInt_FromLong((long) value);
        } else if (sizeof(int) <= sizeof(unsigned long)) {
            return PyLong_FromUnsignedLong((unsigned long) value);
        } else if (sizeof(int) <= sizeof(unsigned PY_LONG_LONG)) {
            return PyLong_FromUnsignedLongLong((unsigned PY_LONG_LONG) value);
        }
    } else {
        if (sizeof(int) <= sizeof(long)) {
            return PyInt_FromLong((long) value);
        } else if (sizeof(int) <= sizeof(PY_LONG_LONG)) {
            return PyLong_FromLongLong((PY_LONG_LONG) value);
        }
    }
    {
        int one = 1; int little = (int)*(unsigned char *)&one;
        unsigned char *bytes = (unsigned char *)&value;
        return _PyLong_FromByteArray(bytes, sizeof(int),
                                     little, !is_unsigned);
    }
}

static CYTHON_INLINE PyObject* __Pyx_PyInt_From_UCHAR(UCHAR value) {
    const UCHAR neg_one = (UCHAR) -1, const_zero = (UCHAR) 0;
    const int is_unsigned = neg_one > const_zero;
    if (is_unsigned) {
        if (sizeof(UCHAR) < sizeof(long)) {
            return PyInt_FromLong((long) value);
        } else if (sizeof(UCHAR) <= sizeof(unsigned long)) {
            return PyLong_FromUnsignedLong((unsigned long) value);
        } else if (sizeof(UCHAR) <= sizeof(unsigned PY_LONG_LONG)) {
            return PyLong_FromUnsignedLongLong((unsigned PY_LONG_LONG) value);
        }
    } else {
        if (sizeof(UCHAR) <= sizeof(long)) {
            return PyInt_FromLong((long) value);
        } else if (sizeof(UCHAR) <= sizeof(PY_LONG_LONG)) {
            return PyLong_FromLongLong((PY_LONG_LONG) value);
        }
    }
    {
        int one = 1; int little = (int)*(unsigned char *)&one;
        unsigned char *bytes = (unsigned char *)&value;
        return _PyLong_FromByteArray(bytes, sizeof(UCHAR),
                                     little, !is_unsigned);
    }
}

static CYTHON_INLINE PyObject* __Pyx_PyInt_From_CHAR(CHAR value) {
    const CHAR neg_one = (CHAR) -1, const_zero = (CHAR) 0;
    const int is_unsigned = neg_one > const_zero;
    if (is_unsigned) {
        if (sizeof(CHAR) < sizeof(long)) {
            return PyInt_FromLong((long) value);
        } else if (sizeof(CHAR) <= sizeof(unsigned long)) {
            return PyLong_FromUnsignedLong((unsigned long) value);
        } else if (sizeof(CHAR) <= sizeof(unsigned PY_LONG_LONG)) {
            return PyLong_FromUnsignedLongLong((unsigned PY_LONG_LONG) value);
        }
    } else {
        if (sizeof(CHAR) <= sizeof(long)) {
            return PyInt_FromLong((long) value);
        } else if (sizeof(CHAR) <= sizeof(PY_LONG_LONG)) {
            return PyLong_FromLongLong((PY_LONG_LONG) value);
        }
    }
    {
        int one = 1; int little = (int)*(unsigned char *)&one;
        unsigned char *bytes = (unsigned char *)&value;
        return _PyLong_FromByteArray(bytes, sizeof(CHAR),
                                     little, !is_unsigned);
    }
}

static CYTHON_INLINE PyObject* __Pyx_PyInt_From_BYTE(BYTE value) {
    const BYTE neg_one = (BYTE) -1, const_zero = (BYTE) 0;
    const int is_unsigned = neg_one > const_zero;
    if (is_unsigned) {
        if (sizeof(BYTE) < sizeof(long)) {
            return PyInt_FromLong((long) value);
        } else if (sizeof(BYTE) <= sizeof(unsigned long)) {
            return PyLong_FromUnsignedLong((unsigned long) value);
        } else if (sizeof(BYTE) <= sizeof(unsigned PY_LONG_LONG)) {
            return PyLong_FromUnsignedLongLong((unsigned PY_LONG_LONG) value);
        }
    } else {
        if (sizeof(BYTE) <= sizeof(long)) {
            return PyInt_FromLong((long) value);
        } else if (sizeof(BYTE) <= sizeof(PY_LONG_LONG)) {
            return PyLong_FromLongLong((PY_LONG_LONG) value);
        }
    }
    {
        int one = 1; int little = (int)*(unsigned char *)&one;
        unsigned char *bytes = (unsigned char *)&value;
        return _PyLong_FromByteArray(bytes, sizeof(BYTE),
                                     little, !is_unsigned);
    }
}

static CYTHON_INLINE PyObject* __Pyx_PyInt_From_ULONGLONG(ULONGLONG value) {
    const ULONGLONG neg_one = (ULONGLONG) -1, const_zero = (ULONGLONG) 0;
    const int is_unsigned = neg_one > const_zero;
    if (is_unsigned) {
        if (sizeof(ULONGLONG) < sizeof(long)) {
            return PyInt_FromLong((long) value);
        } else if (sizeof(ULONGLONG) <= sizeof(unsigned long)) {
            return PyLong_FromUnsignedLong((unsigned long) value);
        } else if (sizeof(ULONGLONG) <= sizeof(unsigned PY_LONG_LONG)) {
            return PyLong_FromUnsignedLongLong((unsigned PY_LONG_LONG) value);
        }
    } else {
        if (sizeof(ULONGLONG) <= sizeof(long)) {
            return PyInt_FromLong((long) value);
        } else if (sizeof(ULONGLONG) <= sizeof(PY_LONG_LONG)) {
            return PyLong_FromLongLong((PY_LONG_LONG) value);
        }
    }
    {
        int one = 1; int little = (int)*(unsigned char *)&one;
        unsigned char *bytes = (unsigned char *)&value;
        return _PyLong_FromByteArray(bytes, sizeof(ULONGLONG),
                                     little, !is_unsigned);
    }
}

static CYTHON_INLINE PyObject* __Pyx_PyInt_From_SHORT(SHORT value) {
    const SHORT neg_one = (SHORT) -1, const_zero = (SHORT) 0;
    const int is_unsigned = neg_one > const_zero;
    if (is_unsigned) {
        if (sizeof(SHORT) < sizeof(long)) {
            return PyInt_FromLong((long) value);
        } else if (sizeof(SHORT) <= sizeof(unsigned long)) {
            return PyLong_FromUnsignedLong((unsigned long) value);
        } else if (sizeof(SHORT) <= sizeof(unsigned PY_LONG_LONG)) {
            return PyLong_FromUnsignedLongLong((unsigned PY_LONG_LONG) value);
        }
    } else {
        if (sizeof(SHORT) <= sizeof(long)) {
            return PyInt_FromLong((long) value);
        } else if (sizeof(SHORT) <= sizeof(PY_LONG_LONG)) {
            return PyLong_FromLongLong((PY_LONG_LONG) value);
        }
    }
    {
        int one = 1; int little = (int)*(unsigned char *)&one;
        unsigned char *bytes = (unsigned char *)&value;
        return _PyLong_FromByteArray(bytes, sizeof(SHORT),
                                     little, !is_unsigned);
    }
}

static CYTHON_INLINE PyObject* __Pyx_PyInt_From_USHORT(USHORT value) {
    const USHORT neg_one = (USHORT) -1, const_zero = (USHORT) 0;
    const int is_unsigned = neg_one > const_zero;
    if (is_unsigned) {
        if (sizeof(USHORT) < sizeof(long)) {
            return PyInt_FromLong((long) value);
        } else if (sizeof(USHORT) <= sizeof(unsigned long)) {
            return PyLong_FromUnsignedLong((unsigned long) value);
        } else if (sizeof(USHORT) <= sizeof(unsigned PY_LONG_LONG)) {
            return PyLong_FromUnsignedLongLong((unsigned PY_LONG_LONG) value);
        }
    } else {
        if (sizeof(USHORT) <= sizeof(long)) {
            return PyInt_FromLong((long) value);
        } else if (sizeof(USHORT) <= sizeof(PY_LONG_LONG)) {
            return PyLong_FromLongLong((PY_LONG_LONG) value);
        }
    }
    {
        int one = 1; int little = (int)*(unsigned char *)&one;
        unsigned char *bytes = (unsigned char *)&value;
        return _PyLong_FromByteArray(bytes, sizeof(USHORT),
                                     little, !is_unsigned);
    }
}

static CYTHON_INLINE PyObject* __Pyx_PyInt_From_LONG(LONG value) {
    const LONG neg_one = (LONG) -1, const_zero = (LONG) 0;
    const int is_unsigned = neg_one > const_zero;
    if (is_unsigned) {
        if (sizeof(LONG) < sizeof(long)) {
            return PyInt_FromLong((long) value);
        } else if (sizeof(LONG) <= sizeof(unsigned long)) {
            return PyLong_FromUnsignedLong((unsigned long) value);
        } else if (sizeof(LONG) <= sizeof(unsigned PY_LONG_LONG)) {
            return PyLong_FromUnsignedLongLong((unsigned PY_LONG_LONG) value);
        }
    } else {
        if (sizeof(LONG) <= sizeof(long)) {
            return PyInt_FromLong((long) value);
        } else if (sizeof(LONG) <= sizeof(PY_LONG_LONG)) {
            return PyLong_FromLongLong((PY_LONG_LONG) value);
        }
    }
    {
        int one = 1; int little = (int)*(unsigned char *)&one;
        unsigned char *bytes = (unsigned char *)&value;
        return _PyLong_FromByteArray(bytes, sizeof(LONG),
                                     little, !is_unsigned);
    }
}

static CYTHON_INLINE PyObject* __Pyx_PyInt_From_LONGLONG(LONGLONG value) {
    const LONGLONG neg_one = (LONGLONG) -1, const_zero = (LONGLONG) 0;
    const int is_unsigned = neg_one > const_zero;
    if (is_unsigned) {
        if (sizeof(LONGLONG) < sizeof(long)) {
            return PyInt_FromLong((long) value);
        } else if (sizeof(LONGLONG) <= sizeof(unsigned long)) {
            return PyLong_FromUnsignedLong((unsigned long) value);
        } else if (sizeof(LONGLONG) <= sizeof(unsigned PY_LONG_LONG)) {
            return PyLong_FromUnsignedLongLong((unsigned PY_LONG_LONG) value);
        }
    } else {
        if (sizeof(LONGLONG) <= sizeof(long)) {
            return PyInt_FromLong((long) value);
        } else if (sizeof(LONGLONG) <= sizeof(PY_LONG_LONG)) {
            return PyLong_FromLongLong((PY_LONG_LONG) value);
        }
    }
    {
        int one = 1; int little = (int)*(unsigned char *)&one;
        unsigned char *bytes = (unsigned char *)&value;
        return _PyLong_FromByteArray(bytes, sizeof(LONGLONG),
                                     little, !is_unsigned);
    }
}

static CYTHON_INLINE PyObject* __Pyx_PyInt_From_DWORD(DWORD value) {
    const DWORD neg_one = (DWORD) -1, const_zero = (DWORD) 0;
    const int is_unsigned = neg_one > const_zero;
    if (is_unsigned) {
        if (sizeof(DWORD) < sizeof(long)) {
            return PyInt_FromLong((long) value);
        } else if (sizeof(DWORD) <= sizeof(unsigned long)) {
            return PyLong_FromUnsignedLong((unsigned long) value);
        } else if (sizeof(DWORD) <= sizeof(unsigned PY_LONG_LONG)) {
            return PyLong_FromUnsignedLongLong((unsigned PY_LONG_LONG) value);
        }
    } else {
        if (sizeof(DWORD) <= sizeof(long)) {
            return PyInt_FromLong((long) value);
        } else if (sizeof(DWORD) <= sizeof(PY_LONG_LONG)) {
            return PyLong_FromLongLong((PY_LONG_LONG) value);
        }
    }
    {
        int one = 1; int little = (int)*(unsigned char *)&one;
        unsigned char *bytes = (unsigned char *)&value;
        return _PyLong_FromByteArray(bytes, sizeof(DWORD),
                                     little, !is_unsigned);
    }
}

static CYTHON_INLINE PyObject* __Pyx_PyInt_From_WORD(WORD value) {
    const WORD neg_one = (WORD) -1, const_zero = (WORD) 0;
    const int is_unsigned = neg_one > const_zero;
    if (is_unsigned) {
        if (sizeof(WORD) < sizeof(long)) {
            return PyInt_FromLong((long) value);
        } else if (sizeof(WORD) <= sizeof(unsigned long)) {
            return PyLong_FromUnsignedLong((unsigned long) value);
        } else if (sizeof(WORD) <= sizeof(unsigned PY_LONG_LONG)) {
            return PyLong_FromUnsignedLongLong((unsigned PY_LONG_LONG) value);
        }
    } else {
        if (sizeof(WORD) <= sizeof(long)) {
            return PyInt_FromLong((long) value);
        } else if (sizeof(WORD) <= sizeof(PY_LONG_LONG)) {
            return PyLong_FromLongLong((PY_LONG_LONG) value);
        }
    }
    {
        int one = 1; int little = (int)*(unsigned char *)&one;
        unsigned char *bytes = (unsigned char *)&value;
        return _PyLong_FromByteArray(bytes, sizeof(WORD),
                                     little, !is_unsigned);
    }
}

static CYTHON_INLINE PyObject* __Pyx_PyInt_From_long(long value) {
    const long neg_one = (long) -1, const_zero = (long) 0;
    const int is_unsigned = neg_one > const_zero;
    if (is_unsigned) {
        if (sizeof(long) < sizeof(long)) {
            return PyInt_FromLong((long) value);
        } else if (sizeof(long) <= sizeof(unsigned long)) {
            return PyLong_FromUnsignedLong((unsigned long) value);
        } else if (sizeof(long) <= sizeof(unsigned PY_LONG_LONG)) {
            return PyLong_FromUnsignedLongLong((unsigned PY_LONG_LONG) value);
        }
    } else {
        if (sizeof(long) <= sizeof(long)) {
            return PyInt_FromLong((long) value);
        } else if (sizeof(long) <= sizeof(PY_LONG_LONG)) {
            return PyLong_FromLongLong((PY_LONG_LONG) value);
        }
    }
    {
        int one = 1; int little = (int)*(unsigned char *)&one;
        unsigned char *bytes = (unsigned char *)&value;
        return _PyLong_FromByteArray(bytes, sizeof(long),
                                     little, !is_unsigned);
    }
}

#define __PYX_VERIFY_RETURN_INT(target_type, func_type, func_value)\
    __PYX__VERIFY_RETURN_INT(target_type, func_type, func_value, 0)
#define __PYX_VERIFY_RETURN_INT_EXC(target_type, func_type, func_value)\
    __PYX__VERIFY_RETURN_INT(target_type, func_type, func_value, 1)
#define __PYX__VERIFY_RETURN_INT(target_type, func_type, func_value, exc)\
    {\
        func_type value = func_value;\
        if (sizeof(target_type) < sizeof(func_type)) {\
            if (unlikely(value != (func_type) (target_type) value)) {\
                func_type zero = 0;\
                if (exc && unlikely(value == (func_type)-1 && PyErr_Occurred()))\
                    return (target_type) -1;\
                if (is_unsigned && unlikely(value < zero))\
                    goto raise_neg_overflow;\
                else\
                    goto raise_overflow;\
            }\
        }\
        return (target_type) value;\
    }

static CYTHON_INLINE long __Pyx_PyInt_As_long(PyObject *x) {
    const long neg_one = (long) -1, const_zero = (long) 0;
    const int is_unsigned = neg_one > const_zero;
#if PY_MAJOR_VERSION < 3
    if (likely(PyInt_Check(x))) {
        if (sizeof(long) < sizeof(long)) {
            __PYX_VERIFY_RETURN_INT(long, long, PyInt_AS_LONG(x))
        } else {
            long val = PyInt_AS_LONG(x);
            if (is_unsigned && unlikely(val < 0)) {
                goto raise_neg_overflow;
            }
            return (long) val;
        }
    } else
#endif
    if (likely(PyLong_Check(x))) {
        if (is_unsigned) {
#if CYTHON_USE_PYLONG_INTERNALS
            const digit* digits = ((PyLongObject*)x)->ob_digit;
            switch (Py_SIZE(x)) {
                case  0: return (long) 0;
                case  1: __PYX_VERIFY_RETURN_INT(long, digit, digits[0])
                case 2:
                    if (8 * sizeof(long) > 1 * PyLong_SHIFT) {
                        if (8 * sizeof(unsigned long) > 2 * PyLong_SHIFT) {
                            __PYX_VERIFY_RETURN_INT(long, unsigned long, (((((unsigned long)digits[1]) << PyLong_SHIFT) | (unsigned long)digits[0])))
                        } else if (8 * sizeof(long) >= 2 * PyLong_SHIFT) {
                            return (long) (((((long)digits[1]) << PyLong_SHIFT) | (long)digits[0]));
                        }
                    }
                    break;
                case 3:
                    if (8 * sizeof(long) > 2 * PyLong_SHIFT) {
                        if (8 * sizeof(unsigned long) > 3 * PyLong_SHIFT) {
                            __PYX_VERIFY_RETURN_INT(long, unsigned long, (((((((unsigned long)digits[2]) << PyLong_SHIFT) | (unsigned long)digits[1]) << PyLong_SHIFT) | (unsigned long)digits[0])))
                        } else if (8 * sizeof(long) >= 3 * PyLong_SHIFT) {
                            return (long) (((((((long)digits[2]) << PyLong_SHIFT) | (long)digits[1]) << PyLong_SHIFT) | (long)digits[0]));
                        }
                    }
                    break;
                case 4:
                    if (8 * sizeof(long) > 3 * PyLong_SHIFT) {
                        if (8 * sizeof(unsigned long) > 4 * PyLong_SHIFT) {
                            __PYX_VERIFY_RETURN_INT(long, unsigned long, (((((((((unsigned long)digits[3]) << PyLong_SHIFT) | (unsigned long)digits[2]) << PyLong_SHIFT) | (unsigned long)digits[1]) << PyLong_SHIFT) | (unsigned long)digits[0])))
                        } else if (8 * sizeof(long) >= 4 * PyLong_SHIFT) {
                            return (long) (((((((((long)digits[3]) << PyLong_SHIFT) | (long)digits[2]) << PyLong_SHIFT) | (long)digits[1]) << PyLong_SHIFT) | (long)digits[0]));
                        }
                    }
                    break;
            }
#endif
#if CYTHON_COMPILING_IN_CPYTHON
            if (unlikely(Py_SIZE(x) < 0)) {
                goto raise_neg_overflow;
            }
#else
            {
                int result = PyObject_RichCompareBool(x, Py_False, Py_LT);
                if (unlikely(result < 0))
                    return (long) -1;
                if (unlikely(result == 1))
                    goto raise_neg_overflow;
            }
#endif
            if (sizeof(long) <= sizeof(unsigned long)) {
                __PYX_VERIFY_RETURN_INT_EXC(long, unsigned long, PyLong_AsUnsignedLong(x))
            } else if (sizeof(long) <= sizeof(unsigned PY_LONG_LONG)) {
                __PYX_VERIFY_RETURN_INT_EXC(long, unsigned PY_LONG_LONG, PyLong_AsUnsignedLongLong(x))
            }
        } else {
#if CYTHON_USE_PYLONG_INTERNALS
            const digit* digits = ((PyLongObject*)x)->ob_digit;
            switch (Py_SIZE(x)) {
                case  0: return (long) 0;
                case -1: __PYX_VERIFY_RETURN_INT(long, sdigit, -(sdigit) digits[0])
                case  1: __PYX_VERIFY_RETURN_INT(long,  digit, +digits[0])
                case -2:
                    if (8 * sizeof(long) - 1 > 1 * PyLong_SHIFT) {
                        if (8 * sizeof(unsigned long) > 2 * PyLong_SHIFT) {
                            __PYX_VERIFY_RETURN_INT(long, long, -(long) (((((unsigned long)digits[1]) << PyLong_SHIFT) | (unsigned long)digits[0])))
                        } else if (8 * sizeof(long) - 1 > 2 * PyLong_SHIFT) {
                            return (long) (((long)-1)*(((((long)digits[1]) << PyLong_SHIFT) | (long)digits[0])));
                        }
                    }
                    break;
                case 2:
                    if (8 * sizeof(long) > 1 * PyLong_SHIFT) {
                        if (8 * sizeof(unsigned long) > 2 * PyLong_SHIFT) {
                            __PYX_VERIFY_RETURN_INT(long, unsigned long, (((((unsigned long)digits[1]) << PyLong_SHIFT) | (unsigned long)digits[0])))
                        } else if (8 * sizeof(long) - 1 > 2 * PyLong_SHIFT) {
                            return (long) ((((((long)digits[1]) << PyLong_SHIFT) | (long)digits[0])));
                        }
                    }
                    break;
                case -3:
                    if (8 * sizeof(long) - 1 > 2 * PyLong_SHIFT) {
                        if (8 * sizeof(unsigned long) > 3 * PyLong_SHIFT) {
                            __PYX_VERIFY_RETURN_INT(long, long, -(long) (((((((unsigned long)digits[2]) << PyLong_SHIFT) | (unsigned long)digits[1]) << PyLong_SHIFT) | (unsigned long)digits[0])))
                        } else if (8 * sizeof(long) - 1 > 3 * PyLong_SHIFT) {
                            return (long) (((long)-1)*(((((((long)digits[2]) << PyLong_SHIFT) | (long)digits[1]) << PyLong_SHIFT) | (long)digits[0])));
                        }
                    }
                    break;
                case 3:
                    if (8 * sizeof(long) > 2 * PyLong_SHIFT) {
                        if (8 * sizeof(unsigned long) > 3 * PyLong_SHIFT) {
                            __PYX_VERIFY_RETURN_INT(long, unsigned long, (((((((unsigned long)digits[2]) << PyLong_SHIFT) | (unsigned long)digits[1]) << PyLong_SHIFT) | (unsigned long)digits[0])))
                        } else if (8 * sizeof(long) - 1 > 3 * PyLong_SHIFT) {
                            return (long) ((((((((long)digits[2]) << PyLong_SHIFT) | (long)digits[1]) << PyLong_SHIFT) | (long)digits[0])));
                        }
                    }
                    break;
                case -4:
                    if (8 * sizeof(long) - 1 > 3 * PyLong_SHIFT) {
                        if (8 * sizeof(unsigned long) > 4 * PyLong_SHIFT) {
                            __PYX_VERIFY_RETURN_INT(long, long, -(long) (((((((((unsigned long)digits[3]) << PyLong_SHIFT) | (unsigned long)digits[2]) << PyLong_SHIFT) | (unsigned long)digits[1]) << PyLong_SHIFT) | (unsigned long)digits[0])))
                        } else if (8 * sizeof(long) - 1 > 4 * PyLong_SHIFT) {
                            return (long) (((long)-1)*(((((((((long)digits[3]) << PyLong_SHIFT) | (long)digits[2]) << PyLong_SHIFT) | (long)digits[1]) << PyLong_SHIFT) | (long)digits[0])));
                        }
                    }
                    break;
                case 4:
                    if (8 * sizeof(long) > 3 * PyLong_SHIFT) {
                        if (8 * sizeof(unsigned long) > 4 * PyLong_SHIFT) {
                            __PYX_VERIFY_RETURN_INT(long, unsigned long, (((((((((unsigned long)digits[3]) << PyLong_SHIFT) | (unsigned long)digits[2]) << PyLong_SHIFT) | (unsigned long)digits[1]) << PyLong_SHIFT) | (unsigned long)digits[0])))
                        } else if (8 * sizeof(long) - 1 > 4 * PyLong_SHIFT) {
                            return (long) ((((((((((long)digits[3]) << PyLong_SHIFT) | (long)digits[2]) << PyLong_SHIFT) | (long)digits[1]) << PyLong_SHIFT) | (long)digits[0])));
                        }
                    }
                    break;
            }
#endif
            if (sizeof(long) <= sizeof(long)) {
                __PYX_VERIFY_RETURN_INT_EXC(long, long, PyLong_AsLong(x))
            } else if (sizeof(long) <= sizeof(PY_LONG_LONG)) {
                __PYX_VERIFY_RETURN_INT_EXC(long, PY_LONG_LONG, PyLong_AsLongLong(x))
            }
        }
        {
#if CYTHON_COMPILING_IN_PYPY && !defined(_PyLong_AsByteArray)
            PyErr_SetString(PyExc_RuntimeError,
                            "_PyLong_AsByteArray() not available in PyPy, cannot convert large numbers");
#else
            long val;
            PyObject *v = __Pyx_PyNumber_Int(x);
 #if PY_MAJOR_VERSION < 3
            if (likely(v) && !PyLong_Check(v)) {
                PyObject *tmp = v;
                v = PyNumber_Long(tmp);
                Py_DECREF(tmp);
            }
 #endif
            if (likely(v)) {
                int one = 1; int is_little = (int)*(unsigned char *)&one;
                unsigned char *bytes = (unsigned char *)&val;
                int ret = _PyLong_AsByteArray((PyLongObject *)v,
                                              bytes, sizeof(val),
                                              is_little, !is_unsigned);
                Py_DECREF(v);
                if (likely(!ret))
                    return val;
            }
#endif
            return (long) -1;
        }
    } else {
        long val;
        PyObject *tmp = __Pyx_PyNumber_Int(x);
        if (!tmp) return (long) -1;
        val = __Pyx_PyInt_As_long(tmp);
        Py_DECREF(tmp);
        return val;
    }
raise_overflow:
    PyErr_SetString(PyExc_OverflowError,
        "value too large to convert to long");
    return (long) -1;
raise_neg_overflow:
    PyErr_SetString(PyExc_OverflowError,
        "can't convert negative value to long");
    return (long) -1;
}

static CYTHON_INLINE int __Pyx_PyInt_As_int(PyObject *x) {
    const int neg_one = (int) -1, const_zero = (int) 0;
    const int is_unsigned = neg_one > const_zero;
#if PY_MAJOR_VERSION < 3
    if (likely(PyInt_Check(x))) {
        if (sizeof(int) < sizeof(long)) {
            __PYX_VERIFY_RETURN_INT(int, long, PyInt_AS_LONG(x))
        } else {
            long val = PyInt_AS_LONG(x);
            if (is_unsigned && unlikely(val < 0)) {
                goto raise_neg_overflow;
            }
            return (int) val;
        }
    } else
#endif
    if (likely(PyLong_Check(x))) {
        if (is_unsigned) {
#if CYTHON_USE_PYLONG_INTERNALS
            const digit* digits = ((PyLongObject*)x)->ob_digit;
            switch (Py_SIZE(x)) {
                case  0: return (int) 0;
                case  1: __PYX_VERIFY_RETURN_INT(int, digit, digits[0])
                case 2:
                    if (8 * sizeof(int) > 1 * PyLong_SHIFT) {
                        if (8 * sizeof(unsigned long) > 2 * PyLong_SHIFT) {
                            __PYX_VERIFY_RETURN_INT(int, unsigned long, (((((unsigned long)digits[1]) << PyLong_SHIFT) | (unsigned long)digits[0])))
                        } else if (8 * sizeof(int) >= 2 * PyLong_SHIFT) {
                            return (int) (((((int)digits[1]) << PyLong_SHIFT) | (int)digits[0]));
                        }
                    }
                    break;
                case 3:
                    if (8 * sizeof(int) > 2 * PyLong_SHIFT) {
                        if (8 * sizeof(unsigned long) > 3 * PyLong_SHIFT) {
                            __PYX_VERIFY_RETURN_INT(int, unsigned long, (((((((unsigned long)digits[2]) << PyLong_SHIFT) | (unsigned long)digits[1]) << PyLong_SHIFT) | (unsigned long)digits[0])))
                        } else if (8 * sizeof(int) >= 3 * PyLong_SHIFT) {
                            return (int) (((((((int)digits[2]) << PyLong_SHIFT) | (int)digits[1]) << PyLong_SHIFT) | (int)digits[0]));
                        }
                    }
                    break;
                case 4:
                    if (8 * sizeof(int) > 3 * PyLong_SHIFT) {
                        if (8 * sizeof(unsigned long) > 4 * PyLong_SHIFT) {
                            __PYX_VERIFY_RETURN_INT(int, unsigned long, (((((((((unsigned long)digits[3]) << PyLong_SHIFT) | (unsigned long)digits[2]) << PyLong_SHIFT) | (unsigned long)digits[1]) << PyLong_SHIFT) | (unsigned long)digits[0])))
                        } else if (8 * sizeof(int) >= 4 * PyLong_SHIFT) {
                            return (int) (((((((((int)digits[3]) << PyLong_SHIFT) | (int)digits[2]) << PyLong_SHIFT) | (int)digits[1]) << PyLong_SHIFT) | (int)digits[0]));
                        }
                    }
                    break;
            }
#endif
#if CYTHON_COMPILING_IN_CPYTHON
            if (unlikely(Py_SIZE(x) < 0)) {
                goto raise_neg_overflow;
            }
#else
            {
                int result = PyObject_RichCompareBool(x, Py_False, Py_LT);
                if (unlikely(result < 0))
                    return (int) -1;
                if (unlikely(result == 1))
                    goto raise_neg_overflow;
            }
#endif
            if (sizeof(int) <= sizeof(unsigned long)) {
                __PYX_VERIFY_RETURN_INT_EXC(int, unsigned long, PyLong_AsUnsignedLong(x))
            } else if (sizeof(int) <= sizeof(unsigned PY_LONG_LONG)) {
                __PYX_VERIFY_RETURN_INT_EXC(int, unsigned PY_LONG_LONG, PyLong_AsUnsignedLongLong(x))
            }
        } else {
#if CYTHON_USE_PYLONG_INTERNALS
            const digit* digits = ((PyLongObject*)x)->ob_digit;
            switch (Py_SIZE(x)) {
                case  0: return (int) 0;
                case -1: __PYX_VERIFY_RETURN_INT(int, sdigit, -(sdigit) digits[0])
                case  1: __PYX_VERIFY_RETURN_INT(int,  digit, +digits[0])
                case -2:
                    if (8 * sizeof(int) - 1 > 1 * PyLong_SHIFT) {
                        if (8 * sizeof(unsigned long) > 2 * PyLong_SHIFT) {
                            __PYX_VERIFY_RETURN_INT(int, long, -(long) (((((unsigned long)digits[1]) << PyLong_SHIFT) | (unsigned long)digits[0])))
                        } else if (8 * sizeof(int) - 1 > 2 * PyLong_SHIFT) {
                            return (int) (((int)-1)*(((((int)digits[1]) << PyLong_SHIFT) | (int)digits[0])));
                        }
                    }
                    break;
                case 2:
                    if (8 * sizeof(int) > 1 * PyLong_SHIFT) {
                        if (8 * sizeof(unsigned long) > 2 * PyLong_SHIFT) {
                            __PYX_VERIFY_RETURN_INT(int, unsigned long, (((((unsigned long)digits[1]) << PyLong_SHIFT) | (unsigned long)digits[0])))
                        } else if (8 * sizeof(int) - 1 > 2 * PyLong_SHIFT) {
                            return (int) ((((((int)digits[1]) << PyLong_SHIFT) | (int)digits[0])));
                        }
                    }
                    break;
                case -3:
                    if (8 * sizeof(int) - 1 > 2 * PyLong_SHIFT) {
                        if (8 * sizeof(unsigned long) > 3 * PyLong_SHIFT) {
                            __PYX_VERIFY_RETURN_INT(int, long, -(long) (((((((unsigned long)digits[2]) << PyLong_SHIFT) | (unsigned long)digits[1]) << PyLong_SHIFT) | (unsigned long)digits[0])))
                        } else if (8 * sizeof(int) - 1 > 3 * PyLong_SHIFT) {
                            return (int) (((int)-1)*(((((((int)digits[2]) << PyLong_SHIFT) | (int)digits[1]) << PyLong_SHIFT) | (int)digits[0])));
                        }
                    }
                    break;
                case 3:
                    if (8 * sizeof(int) > 2 * PyLong_SHIFT) {
                        if (8 * sizeof(unsigned long) > 3 * PyLong_SHIFT) {
                            __PYX_VERIFY_RETURN_INT(int, unsigned long, (((((((unsigned long)digits[2]) << PyLong_SHIFT) | (unsigned long)digits[1]) << PyLong_SHIFT) | (unsigned long)digits[0])))
                        } else if (8 * sizeof(int) - 1 > 3 * PyLong_SHIFT) {
                            return (int) ((((((((int)digits[2]) << PyLong_SHIFT) | (int)digits[1]) << PyLong_SHIFT) | (int)digits[0])));
                        }
                    }
                    break;
                case -4:
                    if (8 * sizeof(int) - 1 > 3 * PyLong_SHIFT) {
                        if (8 * sizeof(unsigned long) > 4 * PyLong_SHIFT) {
                            __PYX_VERIFY_RETURN_INT(int, long, -(long) (((((((((unsigned long)digits[3]) << PyLong_SHIFT) | (unsigned long)digits[2]) << PyLong_SHIFT) | (unsigned long)digits[1]) << PyLong_SHIFT) | (unsigned long)digits[0])))
                        } else if (8 * sizeof(int) - 1 > 4 * PyLong_SHIFT) {
                            return (int) (((int)-1)*(((((((((int)digits[3]) << PyLong_SHIFT) | (int)digits[2]) << PyLong_SHIFT) | (int)digits[1]) << PyLong_SHIFT) | (int)digits[0])));
                        }
                    }
                    break;
                case 4:
                    if (8 * sizeof(int) > 3 * PyLong_SHIFT) {
                        if (8 * sizeof(unsigned long) > 4 * PyLong_SHIFT) {
                            __PYX_VERIFY_RETURN_INT(int, unsigned long, (((((((((unsigned long)digits[3]) << PyLong_SHIFT) | (unsigned long)digits[2]) << PyLong_SHIFT) | (unsigned long)digits[1]) << PyLong_SHIFT) | (unsigned long)digits[0])))
                        } else if (8 * sizeof(int) - 1 > 4 * PyLong_SHIFT) {
                            return (int) ((((((((((int)digits[3]) << PyLong_SHIFT) | (int)digits[2]) << PyLong_SHIFT) | (int)digits[1]) << PyLong_SHIFT) | (int)digits[0])));
                        }
                    }
                    break;
            }
#endif
            if (sizeof(int) <= sizeof(long)) {
                __PYX_VERIFY_RETURN_INT_EXC(int, long, PyLong_AsLong(x))
            } else if (sizeof(int) <= sizeof(PY_LONG_LONG)) {
                __PYX_VERIFY_RETURN_INT_EXC(int, PY_LONG_LONG, PyLong_AsLongLong(x))
            }
        }
        {
#if CYTHON_COMPILING_IN_PYPY && !defined(_PyLong_AsByteArray)
            PyErr_SetString(PyExc_RuntimeError,
                            "_PyLong_AsByteArray() not available in PyPy, cannot convert large numbers");
#else
            int val;
            PyObject *v = __Pyx_PyNumber_Int(x);
 #if PY_MAJOR_VERSION < 3
            if (likely(v) && !PyLong_Check(v)) {
                PyObject *tmp = v;
                v = PyNumber_Long(tmp);
                Py_DECREF(tmp);
            }
 #endif
            if (likely(v)) {
                int one = 1; int is_little = (int)*(unsigned char *)&one;
                unsigned char *bytes = (unsigned char *)&val;
                int ret = _PyLong_AsByteArray((PyLongObject *)v,
                                              bytes, sizeof(val),
                                              is_little, !is_unsigned);
                Py_DECREF(v);
                if (likely(!ret))
                    return val;
            }
#endif
            return (int) -1;
        }
    } else {
        int val;
        PyObject *tmp = __Pyx_PyNumber_Int(x);
        if (!tmp) return (int) -1;
        val = __Pyx_PyInt_As_int(tmp);
        Py_DECREF(tmp);
        return val;
    }
raise_overflow:
    PyErr_SetString(PyExc_OverflowError,
        "value too large to convert to int");
    return (int) -1;
raise_neg_overflow:
    PyErr_SetString(PyExc_OverflowError,
        "can't convert negative value to int");
    return (int) -1;
}

static int __Pyx_check_binary_version(void) {
    char ctversion[4], rtversion[4];
    PyOS_snprintf(ctversion, 4, "%d.%d", PY_MAJOR_VERSION, PY_MINOR_VERSION);
    PyOS_snprintf(rtversion, 4, "%s", Py_GetVersion());
    if (ctversion[0] != rtversion[0] || ctversion[2] != rtversion[2]) {
        char message[200];
        PyOS_snprintf(message, sizeof(message),
                      "compiletime version %s of module '%.100s' "
                      "does not match runtime version %s",
                      ctversion, __Pyx_MODULE_NAME, rtversion);
        return PyErr_WarnEx(NULL, message, 1);
    }
    return 0;
}

#ifndef __PYX_HAVE_RT_ImportModule
#define __PYX_HAVE_RT_ImportModule
static PyObject *__Pyx_ImportModule(const char *name) {
    PyObject *py_name = 0;
    PyObject *py_module = 0;
    py_name = __Pyx_PyIdentifier_FromString(name);
    if (!py_name)
        goto bad;
    py_module = PyImport_Import(py_name);
    Py_DECREF(py_name);
    return py_module;
bad:
    Py_XDECREF(py_name);
    return 0;
}
#endif

#ifndef __PYX_HAVE_RT_ImportType
#define __PYX_HAVE_RT_ImportType
static PyTypeObject *__Pyx_ImportType(const char *module_name, const char *class_name,
    size_t size, int strict)
{
    PyObject *py_module = 0;
    PyObject *result = 0;
    PyObject *py_name = 0;
    char warning[200];
    Py_ssize_t basicsize;
#ifdef Py_LIMITED_API
    PyObject *py_basicsize;
#endif
    py_module = __Pyx_ImportModule(module_name);
    if (!py_module)
        goto bad;
    py_name = __Pyx_PyIdentifier_FromString(class_name);
    if (!py_name)
        goto bad;
    result = PyObject_GetAttr(py_module, py_name);
    Py_DECREF(py_name);
    py_name = 0;
    Py_DECREF(py_module);
    py_module = 0;
    if (!result)
        goto bad;
    if (!PyType_Check(result)) {
        PyErr_Format(PyExc_TypeError,
            "%.200s.%.200s is not a type object",
            module_name, class_name);
        goto bad;
    }
#ifndef Py_LIMITED_API
    basicsize = ((PyTypeObject *)result)->tp_basicsize;
#else
    py_basicsize = PyObject_GetAttrString(result, "__basicsize__");
    if (!py_basicsize)
        goto bad;
    basicsize = PyLong_AsSsize_t(py_basicsize);
    Py_DECREF(py_basicsize);
    py_basicsize = 0;
    if (basicsize == (Py_ssize_t)-1 && PyErr_Occurred())
        goto bad;
#endif
    if (!strict && (size_t)basicsize > size) {
        PyOS_snprintf(warning, sizeof(warning),
            "%s.%s size changed, may indicate binary incompatibility",
            module_name, class_name);
        if (PyErr_WarnEx(NULL, warning, 0) < 0) goto bad;
    }
    else if ((size_t)basicsize != size) {
        PyErr_Format(PyExc_ValueError,
            "%.200s.%.200s has the wrong size, try recompiling",
            module_name, class_name);
        goto bad;
    }
    return (PyTypeObject *)result;
bad:
    Py_XDECREF(py_module);
    Py_XDECREF(result);
    return NULL;
}
#endif

static int __Pyx_InitStrings(__Pyx_StringTabEntry *t) {
    while (t->p) {
        #if PY_MAJOR_VERSION < 3
        if (t->is_unicode) {
            *t->p = PyUnicode_DecodeUTF8(t->s, t->n - 1, NULL);
        } else if (t->intern) {
            *t->p = PyString_InternFromString(t->s);
        } else {
            *t->p = PyString_FromStringAndSize(t->s, t->n - 1);
        }
        #else
        if (t->is_unicode | t->is_str) {
            if (t->intern) {
                *t->p = PyUnicode_InternFromString(t->s);
            } else if (t->encoding) {
                *t->p = PyUnicode_Decode(t->s, t->n - 1, t->encoding, NULL);
            } else {
                *t->p = PyUnicode_FromStringAndSize(t->s, t->n - 1);
            }
        } else {
            *t->p = PyBytes_FromStringAndSize(t->s, t->n - 1);
        }
        #endif
        if (!*t->p)
            return -1;
        ++t;
    }
    return 0;
}

static CYTHON_INLINE PyObject* __Pyx_PyUnicode_FromString(const char* c_str) {
    return __Pyx_PyUnicode_FromStringAndSize(c_str, (Py_ssize_t)strlen(c_str));
}
static CYTHON_INLINE char* __Pyx_PyObject_AsString(PyObject* o) {
    Py_ssize_t ignore;
    return __Pyx_PyObject_AsStringAndSize(o, &ignore);
}
static CYTHON_INLINE char* __Pyx_PyObject_AsStringAndSize(PyObject* o, Py_ssize_t *length) {
#if CYTHON_COMPILING_IN_CPYTHON && (__PYX_DEFAULT_STRING_ENCODING_IS_ASCII || __PYX_DEFAULT_STRING_ENCODING_IS_DEFAULT)
    if (
#if PY_MAJOR_VERSION < 3 && __PYX_DEFAULT_STRING_ENCODING_IS_ASCII
            __Pyx_sys_getdefaultencoding_not_ascii &&
#endif
            PyUnicode_Check(o)) {
#if PY_VERSION_HEX < 0x03030000
        char* defenc_c;
        PyObject* defenc = _PyUnicode_AsDefaultEncodedString(o, NULL);
        if (!defenc) return NULL;
        defenc_c = PyBytes_AS_STRING(defenc);
#if __PYX_DEFAULT_STRING_ENCODING_IS_ASCII
        {
            char* end = defenc_c + PyBytes_GET_SIZE(defenc);
            char* c;
            for (c = defenc_c; c < end; c++) {
                if ((unsigned char) (*c) >= 128) {
                    PyUnicode_AsASCIIString(o);
                    return NULL;
                }
            }
        }
#endif
        *length = PyBytes_GET_SIZE(defenc);
        return defenc_c;
#else
        if (__Pyx_PyUnicode_READY(o) == -1) return NULL;
#if __PYX_DEFAULT_STRING_ENCODING_IS_ASCII
        if (PyUnicode_IS_ASCII(o)) {
            *length = PyUnicode_GET_LENGTH(o);
            return PyUnicode_AsUTF8(o);
        } else {
            PyUnicode_AsASCIIString(o);
            return NULL;
        }
#else
        return PyUnicode_AsUTF8AndSize(o, length);
#endif
#endif
    } else
#endif
#if (!CYTHON_COMPILING_IN_PYPY) || (defined(PyByteArray_AS_STRING) && defined(PyByteArray_GET_SIZE))
    if (PyByteArray_Check(o)) {
        *length = PyByteArray_GET_SIZE(o);
        return PyByteArray_AS_STRING(o);
    } else
#endif
    {
        char* result;
        int r = PyBytes_AsStringAndSize(o, &result, length);
        if (unlikely(r < 0)) {
            return NULL;
        } else {
            return result;
        }
    }
}
static CYTHON_INLINE int __Pyx_PyObject_IsTrue(PyObject* x) {
   int is_true = x == Py_True;
   if (is_true | (x == Py_False) | (x == Py_None)) return is_true;
   else return PyObject_IsTrue(x);
}
static CYTHON_INLINE PyObject* __Pyx_PyNumber_Int(PyObject* x) {
  PyNumberMethods *m;
  const char *name = NULL;
  PyObject *res = NULL;
#if PY_MAJOR_VERSION < 3
  if (PyInt_Check(x) || PyLong_Check(x))
#else
  if (PyLong_Check(x))
#endif
    return __Pyx_NewRef(x);
  m = Py_TYPE(x)->tp_as_number;
#if PY_MAJOR_VERSION < 3
  if (m && m->nb_int) {
    name = "int";
    res = PyNumber_Int(x);
  }
  else if (m && m->nb_long) {
    name = "long";
    res = PyNumber_Long(x);
  }
#else
  if (m && m->nb_int) {
    name = "int";
    res = PyNumber_Long(x);
  }
#endif
  if (res) {
#if PY_MAJOR_VERSION < 3
    if (!PyInt_Check(res) && !PyLong_Check(res)) {
#else
    if (!PyLong_Check(res)) {
#endif
      PyErr_Format(PyExc_TypeError,
                   "__%.4s__ returned non-%.4s (type %.200s)",
                   name, name, Py_TYPE(res)->tp_name);
      Py_DECREF(res);
      return NULL;
    }
  }
  else if (!PyErr_Occurred()) {
    PyErr_SetString(PyExc_TypeError,
                    "an integer is required");
  }
  return res;
}
static CYTHON_INLINE Py_ssize_t __Pyx_PyIndex_AsSsize_t(PyObject* b) {
  Py_ssize_t ival;
  PyObject *x;
#if PY_MAJOR_VERSION < 3
  if (likely(PyInt_CheckExact(b))) {
    if (sizeof(Py_ssize_t) >= sizeof(long))
        return PyInt_AS_LONG(b);
    else
        return PyInt_AsSsize_t(x);
  }
#endif
  if (likely(PyLong_CheckExact(b))) {
    #if CYTHON_USE_PYLONG_INTERNALS
    const digit* digits = ((PyLongObject*)b)->ob_digit;
    const Py_ssize_t size = Py_SIZE(b);
    if (likely(__Pyx_sst_abs(size) <= 1)) {
        ival = likely(size) ? digits[0] : 0;
        if (size == -1) ival = -ival;
        return ival;
    } else {
      switch (size) {
         case 2:
           if (8 * sizeof(Py_ssize_t) > 2 * PyLong_SHIFT) {
             return (Py_ssize_t) (((((size_t)digits[1]) << PyLong_SHIFT) | (size_t)digits[0]));
           }
           break;
         case -2:
           if (8 * sizeof(Py_ssize_t) > 2 * PyLong_SHIFT) {
             return -(Py_ssize_t) (((((size_t)digits[1]) << PyLong_SHIFT) | (size_t)digits[0]));
           }
           break;
         case 3:
           if (8 * sizeof(Py_ssize_t) > 3 * PyLong_SHIFT) {
             return (Py_ssize_t) (((((((size_t)digits[2]) << PyLong_SHIFT) | (size_t)digits[1]) << PyLong_SHIFT) | (size_t)digits[0]));
           }
           break;
         case -3:
           if (8 * sizeof(Py_ssize_t) > 3 * PyLong_SHIFT) {
             return -(Py_ssize_t) (((((((size_t)digits[2]) << PyLong_SHIFT) | (size_t)digits[1]) << PyLong_SHIFT) | (size_t)digits[0]));
           }
           break;
         case 4:
           if (8 * sizeof(Py_ssize_t) > 4 * PyLong_SHIFT) {
             return (Py_ssize_t) (((((((((size_t)digits[3]) << PyLong_SHIFT) | (size_t)digits[2]) << PyLong_SHIFT) | (size_t)digits[1]) << PyLong_SHIFT) | (size_t)digits[0]));
           }
           break;
         case -4:
           if (8 * sizeof(Py_ssize_t) > 4 * PyLong_SHIFT) {
             return -(Py_ssize_t) (((((((((size_t)digits[3]) << PyLong_SHIFT) | (size_t)digits[2]) << PyLong_SHIFT) | (size_t)digits[1]) << PyLong_SHIFT) | (size_t)digits[0]));
           }
           break;
      }
    }
    #endif
    return PyLong_AsSsize_t(b);
  }
  x = PyNumber_Index(b);
  if (!x) return -1;
  ival = PyInt_AsSsize_t(x);
  Py_DECREF(x);
  return ival;
}
static CYTHON_INLINE PyObject * __Pyx_PyInt_FromSize_t(size_t ival) {
    return PyInt_FromSize_t(ival);
}


#endif /* Py_PYTHON_H */
