From 979d1bd418c672570820fd45e7970082f109b812 Mon Sep 17 00:00:00 2001 From: hakril Date: Thu, 13 Apr 2017 13:11:35 +0200 Subject: [PATCH] Regenerate doc with sphinx 1.5.5 --- docs/build/html/_modules/index.html | 2 +- .../html/_modules/windows/crypto/certificate.html | 2 +- .../_modules/windows/crypto/encrypt_decrypt.html | 2 +- .../html/_modules/windows/crypto/generation.html | 2 +- .../html/_modules/windows/debug/breakpoints.html | 2 +- docs/build/html/_modules/windows/debug/debugger.html | 2 +- docs/build/html/_modules/windows/debug/localdbg.html | 2 +- docs/build/html/_modules/windows/hooks.html | 2 +- .../html/_modules/windows/native_exec/cpuid.html | 2 +- .../windows/native_exec/native_function.html | 2 +- .../_modules/windows/native_exec/simple_x86.html | 2 +- docs/build/html/_modules/windows/pe_parse.html | 2 +- docs/build/html/_modules/windows/remotectypes.html | 2 +- docs/build/html/_modules/windows/syswow64.html | 2 +- docs/build/html/_modules/windows/utils/winutils.html | 2 +- .../html/_modules/windows/winobject/exception.html | 2 +- .../html/_modules/windows/winobject/handle.html | 2 +- .../html/_modules/windows/winobject/network.html | 2 +- .../html/_modules/windows/winobject/process.html | 2 +- .../html/_modules/windows/winobject/registry.html | 2 +- .../html/_modules/windows/winobject/service.html | 2 +- .../html/_modules/windows/winobject/system.html | 2 +- .../html/_modules/windows/winobject/volume.html | 2 +- docs/build/html/_modules/windows/winobject/wmi.html | 2 +- docs/build/html/_modules/windows/wintrust.html | 2 +- docs/build/html/_static/basic.css | 2 +- docs/build/html/_static/classic.css | 2 +- docs/build/html/_static/doctools.js | 2 +- docs/build/html/_static/searchtools.js | 2 +- docs/build/html/_static/sidebar.js | 2 +- docs/build/html/_static/websupport.js | 2 +- docs/build/html/com.html | 12 ++++++------ docs/build/html/crypto.html | 2 +- docs/build/html/debug.html | 2 +- docs/build/html/exception.html | 2 +- docs/build/html/genindex.html | 2 +- docs/build/html/handle.html | 2 +- docs/build/html/iat_hook.html | 2 +- docs/build/html/index.html | 2 +- docs/build/html/internals.html | 2 +- docs/build/html/native_exec.html | 2 +- docs/build/html/network.html | 2 +- docs/build/html/process.html | 2 +- docs/build/html/py-modindex.html | 2 +- docs/build/html/registry.html | 2 +- docs/build/html/sample.html | 2 +- docs/build/html/search.html | 2 +- docs/build/html/searchindex.js | 2 +- docs/build/html/service.html | 2 +- docs/build/html/utils.html | 2 +- docs/build/html/various.html | 2 +- docs/build/html/volume.html | 2 +- docs/build/html/windows.html | 6 +++--- docs/build/html/winproxy.html | 2 +- docs/build/html/wintrust.html | 2 +- docs/build/html/wip.html | 2 +- docs/build/html/wmi.html | 2 +- 57 files changed, 64 insertions(+), 64 deletions(-) diff --git a/docs/build/html/_modules/index.html b/docs/build/html/_modules/index.html index 671a21f..dc360d0 100644 --- a/docs/build/html/_modules/index.html +++ b/docs/build/html/_modules/index.html @@ -106,7 +106,7 @@ \ No newline at end of file diff --git a/docs/build/html/_modules/windows/crypto/certificate.html b/docs/build/html/_modules/windows/crypto/certificate.html index 6ea460d..9a33446 100644 --- a/docs/build/html/_modules/windows/crypto/certificate.html +++ b/docs/build/html/_modules/windows/crypto/certificate.html @@ -539,7 +539,7 @@ \ No newline at end of file diff --git a/docs/build/html/_modules/windows/crypto/encrypt_decrypt.html b/docs/build/html/_modules/windows/crypto/encrypt_decrypt.html index 87bc67f..858f5cc 100644 --- a/docs/build/html/_modules/windows/crypto/encrypt_decrypt.html +++ b/docs/build/html/_modules/windows/crypto/encrypt_decrypt.html @@ -193,7 +193,7 @@ \ No newline at end of file diff --git a/docs/build/html/_modules/windows/crypto/generation.html b/docs/build/html/_modules/windows/crypto/generation.html index 240afd3..7d2959c 100644 --- a/docs/build/html/_modules/windows/crypto/generation.html +++ b/docs/build/html/_modules/windows/crypto/generation.html @@ -138,7 +138,7 @@ \ No newline at end of file diff --git a/docs/build/html/_modules/windows/debug/breakpoints.html b/docs/build/html/_modules/windows/debug/breakpoints.html index 741c9da..ee387d3 100644 --- a/docs/build/html/_modules/windows/debug/breakpoints.html +++ b/docs/build/html/_modules/windows/debug/breakpoints.html @@ -244,7 +244,7 @@ \ No newline at end of file diff --git a/docs/build/html/_modules/windows/debug/debugger.html b/docs/build/html/_modules/windows/debug/debugger.html index 311eac8..7dbf6f7 100644 --- a/docs/build/html/_modules/windows/debug/debugger.html +++ b/docs/build/html/_modules/windows/debug/debugger.html @@ -1040,7 +1040,7 @@ \ No newline at end of file diff --git a/docs/build/html/_modules/windows/debug/localdbg.html b/docs/build/html/_modules/windows/debug/localdbg.html index cd14d25..3f6e27c 100644 --- a/docs/build/html/_modules/windows/debug/localdbg.html +++ b/docs/build/html/_modules/windows/debug/localdbg.html @@ -340,7 +340,7 @@ \ No newline at end of file diff --git a/docs/build/html/_modules/windows/hooks.html b/docs/build/html/_modules/windows/hooks.html index d6718f7..5d451c3 100644 --- a/docs/build/html/_modules/windows/hooks.html +++ b/docs/build/html/_modules/windows/hooks.html @@ -186,7 +186,7 @@ \ No newline at end of file diff --git a/docs/build/html/_modules/windows/native_exec/cpuid.html b/docs/build/html/_modules/windows/native_exec/cpuid.html index 117b557..06d649d 100644 --- a/docs/build/html/_modules/windows/native_exec/cpuid.html +++ b/docs/build/html/_modules/windows/native_exec/cpuid.html @@ -243,7 +243,7 @@ \ No newline at end of file diff --git a/docs/build/html/_modules/windows/native_exec/native_function.html b/docs/build/html/_modules/windows/native_exec/native_function.html index 408af88..cc88b29 100644 --- a/docs/build/html/_modules/windows/native_exec/native_function.html +++ b/docs/build/html/_modules/windows/native_exec/native_function.html @@ -200,7 +200,7 @@ \ No newline at end of file diff --git a/docs/build/html/_modules/windows/native_exec/simple_x86.html b/docs/build/html/_modules/windows/native_exec/simple_x86.html index ed13bb3..733a187 100644 --- a/docs/build/html/_modules/windows/native_exec/simple_x86.html +++ b/docs/build/html/_modules/windows/native_exec/simple_x86.html @@ -1134,7 +1134,7 @@ \ No newline at end of file diff --git a/docs/build/html/_modules/windows/pe_parse.html b/docs/build/html/_modules/windows/pe_parse.html index 6a846d8..d963478 100644 --- a/docs/build/html/_modules/windows/pe_parse.html +++ b/docs/build/html/_modules/windows/pe_parse.html @@ -824,7 +824,7 @@ \ No newline at end of file diff --git a/docs/build/html/_modules/windows/remotectypes.html b/docs/build/html/_modules/windows/remotectypes.html index 4fc0bc8..367d5d7 100644 --- a/docs/build/html/_modules/windows/remotectypes.html +++ b/docs/build/html/_modules/windows/remotectypes.html @@ -567,7 +567,7 @@ \ No newline at end of file diff --git a/docs/build/html/_modules/windows/syswow64.html b/docs/build/html/_modules/windows/syswow64.html index 665d0c6..534d64c 100644 --- a/docs/build/html/_modules/windows/syswow64.html +++ b/docs/build/html/_modules/windows/syswow64.html @@ -380,7 +380,7 @@ \ No newline at end of file diff --git a/docs/build/html/_modules/windows/utils/winutils.html b/docs/build/html/_modules/windows/utils/winutils.html index 1f053d8..8c9cd08 100644 --- a/docs/build/html/_modules/windows/utils/winutils.html +++ b/docs/build/html/_modules/windows/utils/winutils.html @@ -362,7 +362,7 @@ \ No newline at end of file diff --git a/docs/build/html/_modules/windows/winobject/exception.html b/docs/build/html/_modules/windows/winobject/exception.html index c9fe6a4..dda59d2 100644 --- a/docs/build/html/_modules/windows/winobject/exception.html +++ b/docs/build/html/_modules/windows/winobject/exception.html @@ -459,7 +459,7 @@ \ No newline at end of file diff --git a/docs/build/html/_modules/windows/winobject/handle.html b/docs/build/html/_modules/windows/winobject/handle.html index 466b683..6302f1c 100644 --- a/docs/build/html/_modules/windows/winobject/handle.html +++ b/docs/build/html/_modules/windows/winobject/handle.html @@ -199,7 +199,7 @@ \ No newline at end of file diff --git a/docs/build/html/_modules/windows/winobject/network.html b/docs/build/html/_modules/windows/winobject/network.html index 86d0944..5b7cb2e 100644 --- a/docs/build/html/_modules/windows/winobject/network.html +++ b/docs/build/html/_modules/windows/winobject/network.html @@ -531,7 +531,7 @@ \ No newline at end of file diff --git a/docs/build/html/_modules/windows/winobject/process.html b/docs/build/html/_modules/windows/winobject/process.html index 9eaf5dc..22ac67e 100644 --- a/docs/build/html/_modules/windows/winobject/process.html +++ b/docs/build/html/_modules/windows/winobject/process.html @@ -1497,7 +1497,7 @@ \ No newline at end of file diff --git a/docs/build/html/_modules/windows/winobject/registry.html b/docs/build/html/_modules/windows/winobject/registry.html index 4680ce2..afea420 100644 --- a/docs/build/html/_modules/windows/winobject/registry.html +++ b/docs/build/html/_modules/windows/winobject/registry.html @@ -268,7 +268,7 @@ \ No newline at end of file diff --git a/docs/build/html/_modules/windows/winobject/service.html b/docs/build/html/_modules/windows/winobject/service.html index 6ad9ff8..96ca05e 100644 --- a/docs/build/html/_modules/windows/winobject/service.html +++ b/docs/build/html/_modules/windows/winobject/service.html @@ -200,7 +200,7 @@ \ No newline at end of file diff --git a/docs/build/html/_modules/windows/winobject/system.html b/docs/build/html/_modules/windows/winobject/system.html index 8147793..1e612c4 100644 --- a/docs/build/html/_modules/windows/winobject/system.html +++ b/docs/build/html/_modules/windows/winobject/system.html @@ -309,7 +309,7 @@ \ No newline at end of file diff --git a/docs/build/html/_modules/windows/winobject/volume.html b/docs/build/html/_modules/windows/winobject/volume.html index d477af5..1f27dd2 100644 --- a/docs/build/html/_modules/windows/winobject/volume.html +++ b/docs/build/html/_modules/windows/winobject/volume.html @@ -155,7 +155,7 @@ \ No newline at end of file diff --git a/docs/build/html/_modules/windows/winobject/wmi.html b/docs/build/html/_modules/windows/winobject/wmi.html index 5e57f6a..2ad8322 100644 --- a/docs/build/html/_modules/windows/winobject/wmi.html +++ b/docs/build/html/_modules/windows/winobject/wmi.html @@ -173,7 +173,7 @@ \ No newline at end of file diff --git a/docs/build/html/_modules/windows/wintrust.html b/docs/build/html/_modules/windows/wintrust.html index 22e0ff5..b7ccdc0 100644 --- a/docs/build/html/_modules/windows/wintrust.html +++ b/docs/build/html/_modules/windows/wintrust.html @@ -282,7 +282,7 @@ \ No newline at end of file diff --git a/docs/build/html/_static/basic.css b/docs/build/html/_static/basic.css index 7ed0e58..dc88b5a 100644 --- a/docs/build/html/_static/basic.css +++ b/docs/build/html/_static/basic.css @@ -4,7 +4,7 @@ * * Sphinx stylesheet -- basic theme. * - * :copyright: Copyright 2007-2016 by the Sphinx team, see AUTHORS. + * :copyright: Copyright 2007-2017 by the Sphinx team, see AUTHORS. * :license: BSD, see LICENSE for details. * */ diff --git a/docs/build/html/_static/classic.css b/docs/build/html/_static/classic.css index 20db95e..22fa0bd 100644 --- a/docs/build/html/_static/classic.css +++ b/docs/build/html/_static/classic.css @@ -4,7 +4,7 @@ * * Sphinx stylesheet -- classic theme. * - * :copyright: Copyright 2007-2016 by the Sphinx team, see AUTHORS. + * :copyright: Copyright 2007-2017 by the Sphinx team, see AUTHORS. * :license: BSD, see LICENSE for details. * */ diff --git a/docs/build/html/_static/doctools.js b/docs/build/html/_static/doctools.js index 8163495..5654977 100644 --- a/docs/build/html/_static/doctools.js +++ b/docs/build/html/_static/doctools.js @@ -4,7 +4,7 @@ * * Sphinx JavaScript utilities for all documentation. * - * :copyright: Copyright 2007-2016 by the Sphinx team, see AUTHORS. + * :copyright: Copyright 2007-2017 by the Sphinx team, see AUTHORS. * :license: BSD, see LICENSE for details. * */ diff --git a/docs/build/html/_static/searchtools.js b/docs/build/html/_static/searchtools.js index bbfb3ac..c821573 100644 --- a/docs/build/html/_static/searchtools.js +++ b/docs/build/html/_static/searchtools.js @@ -4,7 +4,7 @@ * * Sphinx JavaScript utilities for the full-text search. * - * :copyright: Copyright 2007-2016 by the Sphinx team, see AUTHORS. + * :copyright: Copyright 2007-2017 by the Sphinx team, see AUTHORS. * :license: BSD, see LICENSE for details. * */ diff --git a/docs/build/html/_static/sidebar.js b/docs/build/html/_static/sidebar.js index 4282fe9..332bbf2 100644 --- a/docs/build/html/_static/sidebar.js +++ b/docs/build/html/_static/sidebar.js @@ -16,7 +16,7 @@ * Once the browser is closed the cookie is deleted and the position * reset to the default (expanded). * - * :copyright: Copyright 2007-2016 by the Sphinx team, see AUTHORS. + * :copyright: Copyright 2007-2017 by the Sphinx team, see AUTHORS. * :license: BSD, see LICENSE for details. * */ diff --git a/docs/build/html/_static/websupport.js b/docs/build/html/_static/websupport.js index 98e7f40..53f6a45 100644 --- a/docs/build/html/_static/websupport.js +++ b/docs/build/html/_static/websupport.js @@ -4,7 +4,7 @@ * * sphinx.websupport utilities for all documentation. * - * :copyright: Copyright 2007-2016 by the Sphinx team, see AUTHORS. + * :copyright: Copyright 2007-2017 by the Sphinx team, see AUTHORS. * :license: BSD, see LICENSE for details. * */ diff --git a/docs/build/html/com.html b/docs/build/html/com.html index 975d110..e561251 100644 --- a/docs/build/html/com.html +++ b/docs/build/html/com.html @@ -26,7 +26,7 @@ - + @@ -40,7 +40,7 @@ modules |
  • - next |
  • 7. windows.debug – Debugging

    Next topic

    -

    9. IAT hooking

    +

    9. windows.crypto – CryptoAPI

    This Page

      @@ -148,7 +148,7 @@ You can then use the instance to call whatever method you need.

      modules |
    • - next |
    \ No newline at end of file diff --git a/docs/build/html/crypto.html b/docs/build/html/crypto.html index 379995a..652bd2d 100644 --- a/docs/build/html/crypto.html +++ b/docs/build/html/crypto.html @@ -621,7 +621,7 @@ to try it out in real cases.

    \ No newline at end of file diff --git a/docs/build/html/debug.html b/docs/build/html/debug.html index 8264542..62bba51 100644 --- a/docs/build/html/debug.html +++ b/docs/build/html/debug.html @@ -510,7 +510,7 @@ It is based on \ No newline at end of file diff --git a/docs/build/html/exception.html b/docs/build/html/exception.html index f925cc1..bfc16d9 100644 --- a/docs/build/html/exception.html +++ b/docs/build/html/exception.html @@ -641,7 +641,7 @@ Most of the structures are the Windows structure with a prefix © Copyright 2015, Clement Rouault. - Created using Sphinx 1.5.2. + Created using Sphinx 1.5.5. \ No newline at end of file diff --git a/docs/build/html/genindex.html b/docs/build/html/genindex.html index 56fbdb4..19f9dd6 100644 --- a/docs/build/html/genindex.html +++ b/docs/build/html/genindex.html @@ -1321,7 +1321,7 @@ \ No newline at end of file diff --git a/docs/build/html/handle.html b/docs/build/html/handle.html index b471728..7208183 100644 --- a/docs/build/html/handle.html +++ b/docs/build/html/handle.html @@ -185,7 +185,7 @@ \ No newline at end of file diff --git a/docs/build/html/iat_hook.html b/docs/build/html/iat_hook.html index f4a5903..f5bb800 100644 --- a/docs/build/html/iat_hook.html +++ b/docs/build/html/iat_hook.html @@ -247,7 +247,7 @@ \ No newline at end of file diff --git a/docs/build/html/index.html b/docs/build/html/index.html index e566aa3..83a4446 100644 --- a/docs/build/html/index.html +++ b/docs/build/html/index.html @@ -200,7 +200,7 @@ \ No newline at end of file diff --git a/docs/build/html/internals.html b/docs/build/html/internals.html index 475479c..ea44a10 100644 --- a/docs/build/html/internals.html +++ b/docs/build/html/internals.html @@ -268,7 +268,7 @@ With these information we are able to know

    \ No newline at end of file diff --git a/docs/build/html/native_exec.html b/docs/build/html/native_exec.html index d61b3e4..04ab0c7 100644 --- a/docs/build/html/native_exec.html +++ b/docs/build/html/native_exec.html @@ -535,7 +535,7 @@ the end of your © Copyright 2015, Clement Rouault. - Created using Sphinx 1.5.2. + Created using Sphinx 1.5.5. \ No newline at end of file diff --git a/docs/build/html/network.html b/docs/build/html/network.html index 99ab0c1..7a6b3bc 100644 --- a/docs/build/html/network.html +++ b/docs/build/html/network.html @@ -616,7 +616,7 @@ Equals remote_port \ No newline at end of file diff --git a/docs/build/html/process.html b/docs/build/html/process.html index 0a88d46..f5eb5b4 100644 --- a/docs/build/html/process.html +++ b/docs/build/html/process.html @@ -1670,7 +1670,7 @@ You MUST keep a reference to the hook while the hook is enabled.

    \ No newline at end of file diff --git a/docs/build/html/py-modindex.html b/docs/build/html/py-modindex.html index c9a034c..2233b06 100644 --- a/docs/build/html/py-modindex.html +++ b/docs/build/html/py-modindex.html @@ -222,7 +222,7 @@ \ No newline at end of file diff --git a/docs/build/html/registry.html b/docs/build/html/registry.html index 9601b83..225560d 100644 --- a/docs/build/html/registry.html +++ b/docs/build/html/registry.html @@ -252,7 +252,7 @@ \ No newline at end of file diff --git a/docs/build/html/sample.html b/docs/build/html/sample.html index 742f9b7..c6618c1 100644 --- a/docs/build/html/sample.html +++ b/docs/build/html/sample.html @@ -1972,7 +1972,7 @@ File embdeds 2 certificate(s): \ No newline at end of file diff --git a/docs/build/html/search.html b/docs/build/html/search.html index f346183..9abd9a4 100644 --- a/docs/build/html/search.html +++ b/docs/build/html/search.html @@ -101,7 +101,7 @@ \ No newline at end of file diff --git a/docs/build/html/searchindex.js b/docs/build/html/searchindex.js index 00d3b69..43c3479 100644 --- a/docs/build/html/searchindex.js +++ b/docs/build/html/searchindex.js @@ -1 +1 @@ -Search.setIndex({docnames:["crypto","index","sample","winproxy"],envversion:50,filenames:["crypto.rst","index.rst","sample.rst","winproxy.rst"],objects:{"windows.crypto":{CertificateContext:[0,1,1,""],CryptContext:[0,1,1,""],CryptObject:[0,1,1,""],EHCERTSTORE:[0,1,1,""],decrypt:[0,5,1,""],encrypt:[0,5,1,""],generation:[0,0,0,"-"],import_pfx:[0,5,1,""]},"windows.crypto.CertificateContext":{chains:[0,2,1,""],contents:[0,2,1,""],duplicate:[0,3,1,""],encoded:[0,2,1,""],from_buffer:[0,4,1,""],from_file:[0,4,1,""],get_name:[0,3,1,""],issuer:[0,2,1,""],name:[0,2,1,""],raw_serial:[0,2,1,""],serial:[0,2,1,""],store:[0,2,1,""]},"windows.crypto.CryptContext":{contents:[0,2,1,""]},"windows.crypto.CryptObject":{cert:[0,2,1,""],get_cert:[0,3,1,""],get_signer_certificate:[0,3,1,""],get_signer_data:[0,3,1,""],nb_cert:[0,2,1,""],nb_signer:[0,2,1,""]},"windows.crypto.EHCERTSTORE":{add_certificate:[0,3,1,""],certs:[0,2,1,""],from_file:[0,4,1,""],from_system_store:[0,4,1,""],new_in_memory:[0,4,1,""],value:[0,2,1,""]},"windows.crypto.generation":{generate_key:[0,5,1,""],generate_pfx:[0,5,1,""],generate_selfsigned_certificate:[0,5,1,""]},windows:{crypto:[0,0,0,"-"],winproxy:[3,0,0,"-"]}},objnames:{"0":["py","module","Python module"],"1":["py","class","Python class"],"2":["py","attribute","Python attribute"],"3":["py","method","Python method"],"4":["py","classmethod","Python class method"],"5":["py","function","Python function"]},objtypes:{"0":"py:module","1":"py:class","2":"py:attribute","3":"py:method","4":"py:classmethod","5":"py:function"},terms:{"00c04fc295ee":2,"02x":2,"059cb1ba1a41433a18dd8f87422c2ac3bf35b7b8":2,"08x":2,"0x0":2,"0x02649b70":2,"0x026ddd00":[],"0x0272d350":2,"0x02941290":2,"0x02b37ef0":2,"0x02dc8210":2,"0x02ed63f0":3,"0x030a2590":2,"0x03243770":[],"0x0330d990":[],"0x03f6cda0":2,"0x04c87c90":[],"0x04c87cb0":[],"0x0c000000d":[],"0x0l":[2,3],"0x1":[],"0x10":2,"0x1000":[2,3],"0x10002":2,"0x1000l":3,"0x100l":[],"0x10202":2,"0x10202l":2,"0x108":2,"0x10l":[],"0x11111111":[],"0x11223344":2,"0x11223344l":2,"0x12345678":2,"0x12d687":2,"0x1337":2,"0x1337l":2,"0x154":2,"0x1b":2,"0x1d1ab574":2,"0x1db0000":2,"0x1db0010":2,"0x1f03ffl":3,"0x1f0fffl":3,"0x1l":[0,2,3],"0x2":[],"0x200":2,"0x20019l":[],"0x200l":2,"0x202l":2,"0x20590b3ccbc":2,"0x205a1d60000":2,"0x205a1d60000l":2,"0x20l":2,"0x23":[],"0x2649c60":2,"0x2649d50":2,"0x26ddc60":[],"0x26dde40":[],"0x26ddee0":[],"0x26ddf30":[],"0x272a030":2,"0x272a080":2,"0x272acb0":2,"0x272ad00":2,"0x272ad50":2,"0x272ada0":2,"0x27bd5d0":[],"0x27f7f30":[],"0x27f7f80":[],"0x27fa030":[],"0x2a":2,"0x2e64750":2,"0x2l":2,"0x31200efe":2,"0x32d3210":2,"0x33":[],"0x3bfae4l":2,"0x3f0000":2,"0x3f0000l":2,"0x3f0007":2,"0x3f0007l":2,"0x3f6ce40":2,"0x3f6cee0":2,"0x3f6cf30":2,"0x3f6cf80":2,"0x3ffel":0,"0x3l":[2,3],"0x4":2,"0x40ce850":2,"0x40l":3,"0x41":2,"0x41faee0":2,"0x41faf30":2,"0x42":2,"0x424242":2,"0x42424242":2,"0x4242424243434343":2,"0x4242424243434343l":2,"0x4242424243444546":[],"0x42424242l":2,"0x4l":[0,2,3],"0x5a6000l":2,"0x5c90000":[],"0x5l":3,"0x6f80000":2,"0x6l":[],"0x7":2,"0x770d7c04":2,"0x774c0000":2,"0x77541128l":2,"0x77a73bad":2,"0x77ae3c7d":2,"0x7f":2,"0x7ffa3c700000l":2,"0x7ffa3c70f0f0l":2,"0x7ffa3c70f0f5l":2,"0x7ffa3c70f0fal":2,"0x7ffa3c70f0ffl":2,"0x7ffa3c70f100l":2,"0x7l":[],"0x8":2,"0x80000000l":3,"0x80000001l":2,"0x80000003l":2,"0x80000004l":2,"0x8000l":3,"0x8009200c":0,"0x800b0100l":2,"0x80l":3,"0x8984848":2,"0x8d0006":2,"0x8d000c":2,"0x8d0011":2,"0x8d0017":2,"0x8d001c":2,"0x8d0022":2,"0x8d0023":2,"0x8e0000":2,"0x8e0004":2,"0x9":2,"0xa":2,"0xac":2,"0xal":2,"0xc":[],"0xc0000005l":2,"0xcf0002":2,"0xcf0003":2,"0xcf0004":2,"0xcf0005":2,"0xd":2,"0xd60000":2,"0xe24a88fa78":2,"0xe24a88fa78l":2,"0xe24a88fa88":2,"0xe24a88fa88l":2,"0xe24aaf9000l":2,"0xf001fl":3,"0xf003fl":3,"0xff":2,"0xfffffffe":[],"0xffffffff":3,"0xfffffffffffffffe":[],"0xffffffffffffffff":[],"0xffffffffl":3,"11d1":2,"129l":2,"13l":[],"17415_none_dad8722c5bcc2d8f":2,"1970169159l":[],"2001566688l":2,"2001570704l":2,"2001635616l":2,"2001647872l":2,"31bf3856ad364e35":2,"32b":2,"32bit":[],"36864l":0,"38ee":2,"3nblhjn":2,"41ac":2,"4aaptee6itt1kldio":2,"58l":[],"5ufw98n5sqgh":2,"64b":2,"64bit":[],"6ae1":2,"7gwyr41uftkcl66ewhxlaowjmkkg6w2bp9byyqok10idedgace9vjr6m4jdh":2,"7jybzf4spmg4acoft85ao5u6tk5atpb7ypuulaivp8908dwtgqn":2,"817a":2,"85e5":2,"\u03bb":2,"abstract":[],"break":[],"byte":[],"case":[0,2],"char":[],"class":[0,2],"const":2,"default":[0,2,3],"export":2,"final":[],"function":[1,2],"import":[0,2,3],"int":[0,2],"long":[],"new":0,"public":2,"return":[0,2,3],"short":[],"super":2,"switch":[],"true":[2,3],"try":[0,2],"while":2,For:[],Its:[],NOT:[0,2,3],Not:[2,3],One:[],THE:[],That:2,The:[0,1,2,3],Then:[],There:2,These:[],Use:2,Useful:[],Using:1,With:[],_______noumex______:[],__call__:[],__dict__:2,__file__:2,__getitem__:[],__init__:2,__repr__:[],__setitem__:[],__unusedalign:[],_cprototyp:[2,3],_enum_service_status_processa:[],_tcp_table_class:3,_winreg:2,a1udhwrnmeswsabhoewgq2h0dha6ly93d3cubwljcm9zb2z0lmnvbs9wa2lvchmv:2,aa376039:0,aa377163:2,aa379918:2,aa388136:0,abil:[],abl:[0,2],about:[2,3],abspath:2,accept:[],acceptconnect:3,access:2,acpi:2,acquir:[],action:2,activ:[],actual:[],adcbhdelmakga1uebhmcvvmxezarbgnvbagtcldhc2hpbmd0b24xedaobgnvbact:2,add:[0,2,3],add_argu:2,add_bp:2,add_certif:[0,2],add_pars:2,add_subpars:2,additionalinfo:2,addr:2,address:2,addvectoredcontinuehandl:3,addvectoredexceptionhandl:[2,3],adjusttokenprivileg:3,admin:[],adv_import:2,advapi32:2,affect:[],after:[],again:[],aim:[],algid:3,algo:0,algorithm:[0,2],alia:[],align:[],all:[0,2,3],all_calc:[],all_notepad:2,alloc:2,allocated_memori:[],allocations:3,allocconsol:3,allow:[],alpcgetmessageattribut:3,alpcinitializemessageattribut:3,alreadi:[],also:[2,3],alwai:[],amd64:2,analys:2,analysi:2,ani:0,anoth:[2,3],api:[1,2],api_nam:[],apinam:[],append:2,appev:2,appinfo:2,appli:[],applic:2,application_nam:[],appxbackupcontenttyp:2,arg1:[],arg2:[],arg:[2,3],arg_po:2,argpars:2,argument:[2,3],argument_posit:2,argumentpars:2,argv:[],around:3,arrai:[],arround:0,asauthsvc:3,ascii:2,ask:2,aspx:[0,2],assembl:[1,2],associ:[],at_keyexchang:[0,2],at_signatur:2,attach:[],attr:[],attribut:[],attributeflag:3,authenticamd:[],author:2,autohandl:[],automaticali:[],avail:[0,3],axmltwljcm9zb2z0ifdpbmrvd3mguhjvzhvjdglvbibqq0egmjaxmtaefw0xnjew:2,b1jlzg1vbmqxhjacbgnvbaotfu1py3jvc29mdcbdb3jwb3jhdglvbjeumcwga1u:2,ba40727d7d257b00f89fc6ca7296c9833b7b75b2:[],backward:[],badpass:2,baiwadanbgkqhkig9w0baqsfaaocaqeavyc1iawgkoxxaotqxan0lj1j5vx01:2,base64:2,base:[2,3],base_addr:[],baseaddr:2,baseaddress:3,basic:2,bbbb:2,bbyefbecivg:2,becaus:2,been:3,befor:[],begin:2,behaviour:[],behind:[],being:[],benableprivileg:[],bewar:[],bgkqhkig9w0baqefaaocaq8amiibcgkcaqeaywcacyghnink3ecpyu2uz7lcv9q:2,binherithandl:3,bit:2,blablabla:[],blob:[],block:[],bool:[],border:3,both:[],break_on_ret:2,breakpoint:[1,2],buffer:[0,2,3],bufferlength:3,buffers:3,byref:3,bytearrai:[0,2],c_char_p:[],c_uint:2,c_ulong:[],c_void_p:2,calc:2,calcul:[],call:[2,3],callabl:[],callback:[],callind:[],can:[2,3],cannot:2,capit:2,caption:2,care:[],carr:[],cast:2,cat:2,catalog:2,catalogsign:2,catroot:2,caus:2,cauthsvc:3,cbbufsiz:3,cbcertencod:3,cbdata:2,cbencod:3,cbencryptedblob:3,cbhash:3,cbtobeencrypt:3,ccccbbbb:2,ccert:2,cchbuffer:3,cchbufferlength:3,cchfilenamemax:3,cchname:3,cchnamestr:3,cchreferenceddomainnam:3,cer:2,cert:[0,2,3],cert_name_simple_display_typ:0,cert_or_certlist:0,cert_query_content_flag_al:0,cert_query_content_pkcs7_signed_emb:2,cert_stor:[0,2],cert_to_verif:2,certaddcertificatecontexttostor:3,certcomparecertif:3,certcreatecertificatecontext:3,certcreateselfsigncertif:3,certduplicatecertificatecontext:[0,3],certenumcertificatecontextproperti:3,certenumcertificatesinstor:3,certfil:2,certfindcertificateinstor:3,certgetcertificatechain:3,certgetcertificatecontextproperti:3,certgetnamestringa:[0,3],certgetnamestringw:3,certif:1,certif_nam:2,certifact:2,certificatcontext:2,certificatecontext:2,certlist:2,certopenstor:3,certstrtonamea:3,certstrtonamew:3,certverifycertificatechainpolici:2,chain:[0,2],chang:0,check:[1,2],check_debug:[],check_is_elev:2,check_signatur:2,choos:2,chr:2,cimv2:[],classmethod:0,clientportobjectattribut:3,close:2,closehandl:3,clsctx_inproc_serv:3,clsid:2,cmapi:2,cmd:2,cmp:[],cmsg_signer_info:0,cocreateinst:3,code3:[],code4:[],code:1,code_addr:2,code_s:2,codetesteur:2,coinit_multithread:3,coinitializeex:3,coinitializesecur:3,com:[0,1],com_inetfwpolicy2:2,combinaison:[],comctl32:2,comimplement:[],cominterfac:[],command:[2,3],commandlin:2,common:2,common_nam:2,commonnam:2,compar:3,complet:2,complex:[],compon:1,compressedbuff:3,compressedbuffers:3,compressionformat:3,comput:3,computedfamili:[],computedmodel:[],computer_nam:2,computernam:[],condit:[],condrv:2,conn:2,connect:2,connectionmessag:3,connectionmessageattribut:3,connectionporthandl:3,connectionportobjectattribut:3,connectionrequest:3,consol:2,contain:[0,2],contan:0,content:[0,1,2],content_typ:[0,2],context:[0,1,2,3],context_exec:2,context_syswow:[],contextflag:[],contextmanag:[],contextrecord:2,contextu:[],continuedebugev:3,control:2,control_accept:2,conveni:[],convertsidtostringsida:3,convertsidtostringsidw:3,convertstringsidtosida:3,convertstringsidtosidw:3,copi:[],corporation1:2,correct:2,correspond:[],counter:2,cp_handl:2,cproc:[],cprovparam:2,cpuid:1,creat:[0,2],create_connect:2,create_consol:2,create_displac:[],create_file_from_handl:[],create_funct:2,create_inst:2,create_process:2,create_suspend:2,create_thread:2,createdisposit:3,createfile_callback:[],createfilea:[2,3],createfileacallback:[],createfilemappinga:3,createfilemappingw:3,createfilew:3,createopt:3,createprocessa:3,createprocessw:3,createremotethread:3,createsuspend:3,createthread:3,createtoolhelp32snapshot:3,creation:[],crecipientcert:3,cross:1,crypt:2,crypt_algo:2,crypt_algorithm_identifi:2,crypt_deletekeyset:2,crypt_export:[0,2],crypt_key_prov_info:2,crypt_user_keyset:0,cryptacquirecertificateprivatekei:3,cryptacquirecontexta:3,cryptacquirecontextw:[0,2,3],cryptcatadminacquirecontext:3,cryptcatadmincalchashfromfilehandl:3,cryptcatadminenumcatalogfromhash:3,cryptcatadminreleasecatalogcontext:3,cryptcatadminreleasecontext:3,cryptcatcataloginfofromcontext:3,cryptcontext:2,cryptdecodeobject:3,cryptdecryptmessag:3,cryptdestroykei:[2,3],cryptencodeobjectex:3,cryptencryptmessag:3,cryptexportkei:3,cryptgenkei:[2,3],cryptmsggetparam:3,crypto:1,cryptoapi:[1,2],cryptobj:2,cryptobject:2,cryptpars:2,cryptqueryobject:3,cryptreleasecontext:[0,3],cs_32bit:[],cs_64bit:[],cthread:[],ctx:2,ctype:[0,2,3],ctypes_funct:[2,3],ctypes_gener:[],curent:[],current:[0,3],current_process:[],current_profile_typ:[],current_thread:2,current_us:2,currentprocess:2,currentthread:[],currentvers:2,cuwqtwgls2gd5a:2,dai:[],dat:2,data:[0,2],dbg:2,dbg_continu:[],dbg_exception_not_handl:[],dbginterfac:[],dead:[],deadlock:[],deadthread:[],debug:1,debug_exeception_ev:[],debug_functionbp:2,debug_process:2,debug_str:[],debugactiveprocess:3,debugactiveprocessstop:3,debugbreak:3,debugbreakprocess:3,debugcontrol:[],debugg:1,debugger_membp_singlestep:2,debugger_print_ldrloaddl:2,debugingg:[],debugsetprocesskillonexit:3,decod:2,decor:[],decrypt:2,decryptpars:2,def:2,defin:[],definit:[],defint:[],del_bp:[],delet:[],demo:0,depend:2,deref:2,describ:[],descript:2,descriptor:[],descrption:2,desiredaccess:3,desktop:[0,2],dest:2,destin:[],destroi:2,detach:[],devic:2,deviceapi:2,deviceiocontrol:3,dict:2,didn:[],die:[],diff:2,differ:[],direct:[],directli:0,directoryhandl:3,disabl:[],disable_all_memory_breakpoint:[],disableallprivileg:3,disabledmemorybreakpoint:[],disassembl:[],disk:0,disp:[],dispatch:[],displac:[],displai:[],dll:[2,3],dll_load:2,dll_path:[],do_cpuid:[],doc:[],document:[2,3],doe:[2,3],don:2,done:2,dr0:[],dr1:[],dr2:[],dr3:[],dr6:[],dr7:[],drive:[1,2],drive_cdrom:[],drive_fix:2,drive_no_root_dir:[],drive_ramdisk:[],drive_remot:[],drive_remov:[],drive_unknown:[],driver:2,drx:[],dst:2,dummyunionnam:[],dump:2,duplic:0,duplicatehandl:3,dwadddisposit:3,dwauthnlevel:3,dwblobtyp:3,dwcapabl:3,dwcertencodingtyp:3,dwclscontext:3,dwcoinit:3,dwcontinuestatu:3,dwcreationdisposit:3,dwcreationflag:[2,3],dwdesiredaccess:3,dwexitcod:3,dwexpectedcontenttypeflag:3,dwexpectedformattypeflag:3,dwfileoffsethigh:3,dwfileoffsetlow:3,dwfindflag:3,dwfindtyp:3,dwfirstchanc:[],dwflag:[0,2,3],dwflagsandattribut:3,dwfreetyp:3,dwhandl:3,dwimplevel:3,dwindex:3,dwiocontrolcod:3,dwkeyspec:2,dwlen:3,dwlength:3,dwmaximumsizehigh:3,dwmaximumsizelow:3,dwmillisecond:3,dwmsgandcertencodingtyp:3,dwnumberofbytestomap:3,dwobjecttyp:3,dwoption:3,dword:[],dwoutbuflen:3,dwparamtyp:3,dwprocessid:[2,3],dwpropid:3,dwprovtyp:[0,2,3],dwservicest:3,dwservicetyp:3,dwsharemod:3,dwsize:3,dwstacksiz:3,dwstrtype:3,dwthreadaffinitymask:3,dwthreadid:3,dwtype:3,dynam:[],e24a88fa88:2,e2b3c97f:2,eabuff:3,each:0,ealength:3,earli:1,easi:2,eax:2,ebp:2,ebx:2,echo:2,econtext32:[],econtext64:[],econtextwow64:[],ecrypt_data_blob:2,ecx:2,edi:2,edit:[],edr7:[],edx:2,eeflag:2,eexception_debug_info32:[],eexception_debug_info64:[],eexception_point:[],eexception_record32:[],eexception_record64:[],eexception_record:[],eflag:2,ehcertstor:2,eip:2,element:0,elev:2,elif:[],els:2,emb:[],embd:[0,2],embed:[],enabl:2,enable_privileg:[],encod:[0,2],encount:[],encrypt:1,encryption_demo:2,end:2,endswith:2,engizuyhxgvqzrdrhu4g4:2,enhanc:[],enough:3,entri:2,enumer:2,enumservicesstatusexa:3,enumservicesstatusexw:3,enumwindow:3,environ:2,equal:3,errcheck:3,errno:2,error:[2,3],esec:[],esi:2,esp:2,establish:2,eudc:2,even:[],event:2,eventhandl:3,everi:2,ewpxyxnoaw5ndg9umrawdgydvqqhewdszwrtb25kmr4whaydvqqkexvnawnyb3nv:2,ewrnt1bsmtqwmgydvqqfeysymjk4nzkrmtq3ndq5ymutmtvhoc00zwjhltkzzjmt:2,exampl:1,exc:2,exc_addr:2,exc_cod:2,except:[1,2,3],exception_access_viol:2,exception_breakpoint:2,exception_continue_execut:2,exception_single_step:2,exceptionaddress:2,exceptioncod:2,exceptionflag:[],exceptioninform:2,exceptionrecord:2,exe:2,exec:2,execut:[1,2],execute_64bits_code_from_syswow:[],execute_python:2,execute_python_unsaf:[],exempl:3,exist:2,exit:2,exit_callback:[],exit_cod:2,exit_process:[],exit_thread:[],exitprocess:3,exitthread:3,exp:2,expect:[],expir:[],explan:[],explor:1,export_directori:[],export_nam:[],expr:[],extendedregist:[],extract:[0,2],extract_argu:2,f6f92166d7dd:2,f750e6c3:2,fail:[2,3],fake_modul:2,fals:[0,2,3],famili:[],far:[],fat32:2,fault:[],fault_addr:2,featur:[],ff556253:[],fhandl:2,field:[],file:[0,2,3],file_attribute_norm:3,file_h:2,file_map_all_access:3,fileattribut:3,filehandl:[2,3],filenam:[0,2],filesystem:2,filetyp:2,finaluncompresseds:3,find:2,firewal:2,firewallrul:[],first:[2,3],firsthandl:3,fixedinteractiveconsol:2,flag:[0,2,3],flallocationtyp:3,flnewprotect:3,floatsav:[],flprotect:3,follow:2,font:2,force_bit:[],forcibl:2,form:[],format:[2,3],forward:[],found:2,free:[],freeconsol:3,freespac:2,frm:[],from:[0,2],from_address:2,from_buff:[0,2],from_fil:[0,2],from_str:2,from_system_stor:[0,2],ftype:[],full:[],full_signature_inform:2,fullnam:2,func:2,func_getprocaddress32:[],func_getprocaddress64:[],func_nam:[2,3],func_result:2,func_strlena32:[],func_strlena64:[],func_strlenw32:[],func_strlenw64:[],functionbp:[],gate:1,gdef:2,gdi32:2,gdiplu:2,gdiplus_6595b64144ccf1df_1:2,gencrypt:2,gener:[1,2],generate_pfx:2,generate_selfsigned_certif:2,generate_syswow64_cal:[],generated_def:[2,3],generateinitvector:0,generic_read:3,geninitvector:0,genkei:[0,2],genkeyspars:2,genuineintel:[],get:2,get_cert:[0,2],get_cod:2,get_exception_bit:[],get_exception_cod:2,get_exception_context:2,get_firewallen:2,get_handle_from_fil:[],get_mapped_filenam:[],get_memory_breakpoint_at:[],get_nam:0,get_optionalhead:2,get_proc_family_model:[],get_signer_certif:[0,2],get_signer_data:[0,2],get_vendor_id:[],getattr:2,getcomputernamea:3,getcomputernamew:3,getcurrentprocess:3,getcurrentprocessornumb:3,getcurrentthread:3,getcurrentthreadid:3,getcursorpo:3,getdrivetypea:3,getdrivetypew:3,getexitcodeprocess:3,getexitcodethread:3,getextendedtcpt:3,getfileversioninfoa:3,getfileversioninfosizea:3,getfileversioninfosizew:3,getfileversioninfow:3,getift:3,getinterfaceinfo:3,getipaddrt:3,getlasterror:3,getlogicaldrivestringsa:3,getlogicaldrivestringsw:3,getlongpathnamea:3,getmappedfilenameawrapp:3,getmappedfilenamewwrapp:3,getmodulebasenameawrapp:3,getmodulebasenamewwrapp:3,getnamedsecurityinfoa:3,getnamedsecurityinfow:3,getpeernam:2,getpefil:[],getprocaddress32:[],getprocaddress64:[],getprocaddress:3,getprocessdeppolici:3,getprocessid:3,getprocessimagefilenameawrapp:3,getprocessimagefilenamewwrapp:3,getprocesstim:3,getsecurityinfo:3,getshortpathnamea:3,getsidsubauthor:3,getsidsubauthoritycount:3,getstdhandl:3,getsystemmetr:3,getthreadcontext:3,getthreadid:3,gettokeninform:3,getversionexa:3,getversionexw:3,getvolumeinformationa:3,getvolumeinformationw:3,getvolumenameforvolumemountpointa:3,getvolumenameforvolumemountpointw:3,getwindowmodulefilenamea:3,getwindowmodulefilenamew:3,getwindowrect:3,getwindowtexta:3,getwindowtextw:3,ggegtt4pwpqg8ch0jnrkl1fb3kzz7e34:2,github:[],give:[],given:[2,3],goal:[0,2],got:2,group:[],guess:[],gui:[],h1cki4tgezqzceunpnwv6dmuvpciqgeia5phojzyenknd0sx6eqzrynuz1gmn:2,hack:[],had:0,hadditionalstor:3,hakril:2,hand:[],handl:[1,2,3],handle_addr:2,handle_valu:2,handler:[2,3],handlerroutin:3,hanld:[],harddisk0:2,harddiskvolume2:2,hardwar:[],hardware_exec_bp:[],has:[2,3],hasattr:2,hashalgorithm:2,hashlib:2,have:[2,3],haven:0,hcatadmin:3,hcatinfo:3,hcertstor:3,hchainengin:3,hcryptkei:[0,2],hcryptmsg:3,hcryptprov:[2,3],hcryptprovorncryptkei:3,hdevic:3,heaven:1,heavili:3,hello:2,help:[2,3],helper:1,here:[2,3],hex:2,hexdigest:2,hexdump:2,hexpkei:3,hfile:3,hfilemappingobject:3,hhandl:3,hidden:[],hit:[],hkei:[2,3],hkey_current_us:2,hkey_local_machin:2,hmem:3,hmht7km6g8lsmfiga1udeqrlmemkrzbfmq0wcwydvqql:2,hmodul:3,hobject:3,hold:2,hook:1,horribl:[],host:2,hostnam:[],hprocess:3,hprov:3,hscmanag:3,hsnapshot:3,hsourcehandl:3,hsourceprocesshandl:3,hstore:[0,3],htargetprocesshandl:3,htemplatefil:3,hthread:3,http:[0,2],hwnd:3,hxbp:2,hxbreakpoint:2,iat:1,iat_create_fil:[],iat_entri:[],iat_hook:2,iatentri:2,iathook:[],ident:2,identif:[],iid:2,imagepath:2,imagepathnam:[],imm32:2,immedi:[],imp:[],implement:1,import_pfx:2,importerror:2,in073czyitg7mvhbexbofhgncixoufeyhwy1pygjousqsqzs4bj:2,inc:2,includ:[],increment:0,index:[0,1],indic:[],inetfwpolicy2:1,infinit:[2,3],infitin:2,info:2,infolevel:3,inform:[0,2],inherit:[],init:2,init_breakpoint:2,initi:0,initial_cod:2,initialis:2,initvector:0,inject:2,inmessageattribut:3,input_buffer_port:[],input_buffer_s:[],input_buffer_valu:[],instal:[],installd:2,instanc:2,instr:2,instruct:2,int3:[],integr:[],interact:2,interativeconsol:[],interest:[],interfac:[1,2],interface_typ:[],intern:[0,1],invalid:[],io_stack_input_buff:[],io_stack_input_buffer_len:[],iopl_1:[],iopl_2:[],iostatusblock:3,iphlpapierror:3,ipv4:2,ipv6:[],is_amd_proc:[],is_elev:[],is_exit:[],is_intel_proc:[],is_process_32_bit:[],is_sign:2,is_workst:[],is_wow_64:2,issuer:[0,2],item:2,its:[],itself:[],jmp:2,jnz:[],join:2,ju6ih:2,jump:[],just:[],k32:2,k32pe:2,k9dctgaoymff6qukabqidaqab:2,keep:[],kei:[0,2],kernel32:2,kernel32_error_check:[2,3],kernel32error:[0,2,3],kernel:[],kernelbas:2,key_info:[0,2],key_read:[],keyboard:2,keypair:0,keyprovinfo:2,keytyp:0,keyvalu:2,keyword:3,khiu4to5jf25xthf2g:2,kill:2,killonexit:3,knockin:[],know:3,known:[],kwarg:2,kwd:[],l2ec6cyjdqc6hcqbncsbjvq6qgtqbyn:2,l2nlcnrzl01py1dpblbyb1bdqtiwmtffmjaxms0xmc0xos5jcnqwdaydvr0taqh:2,l56:[],lab:[],label:2,lait:2,last:[2,3],lastbranchfromrip:[],lastbranchtorip:[],lastexceptionfromrip:[],lastexceptiontorip:[],layout:2,ldr:2,ldrloaddll:[2,3],ldrloaddll_32_to_64:[],left:0,len0:[],len1:[],len2:[],len3:[],len:[2,3],length:3,let:2,level:[],librari:[0,2],like:[],line:[2,3],linebuf:2,linkhandl:3,linktarget:3,list:[0,2],listen:2,lkd:[],load:[1,2,3],load_dll:[],load_librari:[],loadedmodul:2,loadlibrari:[],loadlibrarya:3,loadlibraryw:3,local:[],local_addr:[],local_address:[],local_debugg:2,local_debugger_remote_process:2,local_handl:[],local_port:2,localdebugg:1,localfre:3,localhost:2,logic:[1,2],logicaldr:2,look:2,lookupaccountsida:3,lookupaccountsidw:3,lookupprivilegevaluea:3,lookupprivilegevaluew:3,loop:2,lower:2,lpaddress:3,lpapplicationnam:3,lparam:3,lpbaseaddress:3,lpbasenam:3,lpbuffer:3,lpbytesreturn:3,lpcbdata:3,lpcommandlin:3,lpcontext:3,lpcreationtim:3,lpcurrentdirectori:3,lpdata:3,lpdatabasenam:3,lpdebugev:3,lpdevicenam:3,lpdirectori:3,lpdwhandl:3,lpenumfunc:3,lpenviron:3,lpexitcod:3,lpexittim:3,lpfile:3,lpfilemappingattribut:3,lpfilenam:3,lpfilesystemflag:3,lpfilesystemnamebuff:3,lpflag:3,lpfloldprotect:3,lpimagefilenam:3,lpinbuff:3,lpkerneltim:3,lplpbuffer:3,lpluid:3,lpmachinenam:3,lpmaximumcomponentlength:3,lpname:3,lpnsize:3,lpnumberofbytesread:3,lpnumberofbyteswritten:3,lpoper:3,lpoutbuff:3,lpoverlap:3,lpparamet:3,lpperman:3,lppoint:3,lpprocessattribut:3,lpprocessinform:3,lpprocnam:3,lprect:3,lpreferenceddomainnam:3,lpreserv:3,lpresumehandl:3,lprootpathnam:3,lpsecurityattribut:3,lpservic:3,lpservicesreturn:3,lpsid:3,lpstartaddress:3,lpstartupinfo:3,lpstring1:3,lpstring2:3,lpstring:3,lpsubblock:3,lpsubkei:[2,3],lpsystemnam:3,lpszlongpath:3,lpszprivileg:[],lpszshortpath:3,lpszstoreprovid:3,lpszstructtyp:3,lpszvolumemountpoint:3,lpszvolumenam:3,lptargethandl:3,lptargetpath:3,lpte:3,lpthreadattribut:3,lpthreadid:3,lptstrfilenam:3,lptype:3,lpusertim:3,lpv:3,lpvalu:3,lpvaluenam:3,lpversioninform:3,lpvolumenamebuff:3,lpvolumeserialnumb:3,lsa_unicode_str:[],lstrcmpa:3,lstrcmpw:3,machin:[],made:[],magic:2,mai:[],main:0,major:[],make:1,manag:[0,1],mandatori:3,mani:[],manual:2,manuali:[],map:[],mape:[],mapviewoffil:3,mask:[],match:2,maximumlength:[],mayb:2,mean:3,mem:2,mem_access:[],mem_commit:3,mem_releas:3,membp:[],memori:[0,2],memory_basic_inform:[],memory_breakpoint:[],memory_st:[],memorybreakpoint:2,memoryinform:3,memoryinformationclass:3,memoryinformationlength:3,messag:[0,2],metavar:2,method:[0,2],microsoft:[0,2],might:[],miifbdcca:2,minor:[],mismatch:[],miss:3,mnemon:[],mode:[],model:1,modul:[0,1,2,3],module_to_trac:2,modulefilenam:3,modulehandl:3,more:2,most:[2,3],mov:2,ms679286:[],ms679287:[],ms679334:[],ms679335:[],ms680351:[],ms680545:[],ms680587:[],ms681403:[],msctf:2,msdn:[0,2],msg:0,msvcr90:2,msxml6:2,mteymdm5mzfafw0xodaxmteymdm5mzfamhaxczajbgnvbaytalvtmrmweqydvqqi:2,much:[],mui:2,multipleinstr:2,must:[2,3],mxcsr:[],my_ex:[],my_fail_kei:2,my_secret_kei:2,mydebugg:2,myfunctionbp:2,myinterfac:[],mykei:2,mypassword:2,name:[0,2],name_valu:2,nametyp:0,narg:2,nativ:1,native_cod:2,native_exec:[1,2],nativeutil:1,nb_cert:[0,2],nb_repeat:2,nb_signer:[0,2],nbufferlength:3,need:[2,3],neededparamat:3,neededparamet:3,neg:2,net_fw_action_:[],net_fw_action_allow:[],net_fw_action_block:[],net_fw_profile2_domain:2,net_fw_profile2_priv:2,net_fw_profile2_publ:2,net_fw_profile_type2_:[],net_fw_rule_dir_in:[],net_fw_rule_dir_out:[],net_fw_rule_direction_:[],netfwpolicy2clsid:2,network:1,new_align:[],new_in_memori:[0,2],new_protect:[],newaccessprotect:3,newli:2,newstat:3,nfilesystemnames:3,nfunc:2,nice:[],ninbuffers:3,nindex:3,nmaxcount:3,nnumberofbytestoread:3,nnumberofbytestowrit:3,non:2,none:[0,2,3],nop:2,normal:2,note:0,notepad:2,noth:3,noumex:[],noutbuffers:3,now:[0,2],now_valu:2,nshowcmd:3,nsize:3,nstdhandl:3,nsubauthor:3,ntalpcacceptconnectport:3,ntalpcconnectport:3,ntalpcconnectportex:3,ntalpccreateport:3,ntalpcsendwaitreceiveport:3,ntcreatefil:[2,3],ntcreatefile_iat:2,ntcreatethreadex:3,ntcreatethreadex_32_to_64:[],ntdll:2,ntf:2,ntgetcontextthread:3,ntgetcontextthread_32_to_64:[],ntopendirectoryobject:3,ntopenev:3,ntopensymboliclinkobject:3,ntprotectvirtualmemori:3,ntquerydirectoryobject:3,ntqueryinformationprocess:3,ntqueryinformationprocess_32_to_64:[],ntqueryinformationthread:3,ntqueryinformationthread_32_to_64:[],ntqueryobject:3,ntquerysymboliclinkobject:3,ntquerysysteminform:3,ntqueryvirtualmemori:3,ntqueryvirtualmemory_32_to_64:[],ntsetcontextthread:3,ntsetcontextthread_32_to_64:[],ntwow64readvirtualmemory64:3,ntwow64writevirtualmemory64:3,number:0,numberofbytestoprotect:3,numberparamet:[],nvolumenames:3,nwashington1:2,nyolocertif:2,o4ibgdccaxwwhwydvr0lbbgwfgykkwybbagcnwodbgyikwybbquhawmwhqydvr0o:2,object:[0,1,2],objectattribut:[2,3],objectinform:3,objectinformationclass:3,objectinformationlength:3,objectnam:2,objecttyp:3,occur:[],offer:0,offset:2,old:[],old_protect:[],oldaccessprotect:3,oldvalu:3,ole32:2,oleacc:2,oleaut32:2,on_create_process:[],on_create_thread:[],on_except:2,on_exit_process:[],on_exit_thread:[],on_load_dl:[],on_output_debug_str:[],on_rip:[],on_single_step:2,on_unload_dl:[],onc:[],one:[0,2],ones:[],onli:2,open:2,open_exist:3,open_reg_hook:2,open_subkei:[],openasself:3,openeventa:3,openeventw:3,openkei:2,openprocess:3,openprocesstoken:3,openscmanagera:3,openscmanagerw:3,openthread:3,openthreadtoken:3,oper:[],operand:[],ord:2,order:[],ordereddict:[],ordin:[2,3],origin:[],originali:[],osnam:2,other:[],ouput:2,our:2,our_connect:2,ourself:2,out:0,out_2_or_4:[],out_4:[],out_ioctl:[],outmessageattribut:3,outnam:2,output:2,own:[],owner:2,p1home:[],p2home:[],p3home:[],p4home:[],p5home:[],p6home:[],package_35_for_kb3128650:2,page:[1,2],page_execute_readwrit:[2,3],page_noaccess:2,page_readwrit:[2,3],pain:[],pair:2,panel:2,param:2,param_nam:3,paramet:3,parent:[],pars:1,parse_arg:2,parser:2,part:[],partition2:2,pass:3,password:[0,2],path:2,pathnam:2,pathtofil:3,pauthlist:3,pbcertencod:3,pbdata:[2,3],pbdecrypt:3,pbencod:3,pbencryptedblob:3,pbhash:3,pblock:3,pbtobeencrypt:3,pca:2,pcbbytesneed:3,pcbdata:3,pcbdecrypt:3,pcbencod:3,pcbencryptedblob:3,pcbhash:3,pcbstructinfo:3,pccert_context:0,pcert:3,pcertcontext:3,pcertid1:3,pcertid2:3,pchainpara:3,pdecryptpara:3,pdwcontenttyp:3,pdwdatalen:3,pdwformattyp:3,pdwkeyspec:3,pdwmsgandcertencodingtyp:3,pdwsize:3,pdwtype:3,pe_pars:2,peb:1,peb_addr:[],peb_syswow:[],pefil:[1,2],pencodepara:3,pencryptpara:3,pendtim:3,perform:[],perform_cal:[2,3],pesect:2,peus:3,pextens:3,pfcallerfreeprovorncryptkei:3,pfw_tmp_key_contain:2,pfx:[0,2],pfxexportcertstoreex:3,pfxfile:2,pfximportcertstor:[2,3],pfxpassword:2,pgactionid:3,pgsubsystem:3,phcatadmin:3,phcertstor:3,phcryptprovorncryptkei:3,phkei:3,phkresult:[2,3],phmsg:3,phprevcatinfo:3,phprov:3,pid:2,piftabl:3,pipaddrt:3,pkcs12_no_persist_kei:0,pkeyprovinfo:3,place:[],plai:2,plu:[],pobjectnam:3,poc:2,point:[0,3],pointer:0,pop:[],pop_calc_32:2,pop_calc_64:2,pop_shel:[],port:2,portattribut:3,portcontext:3,porthandl:3,portnam:3,possess:[],possibl:[],post:2,pouet:[],ppchaincontext:3,ppdacl:3,ppfx:[2,3],ppid:2,pprevcertcontext:3,pprint:2,ppsacl:3,ppsecuritydescriptor:3,ppsidgroup:3,ppsidown:3,ppstorecontext:3,ppszerror:3,ppv:3,ppvcontext:3,ppxchgcert:3,prefix:[],present:[],preserved1:3,preserved3:3,pretti:[],prevent:[],previousst:3,print:2,printer:2,printunicodestr:2,privat:2,privileg:[],pro:2,problabl:0,problem:[],proc:2,process32first:3,process32next:3,process:[1,3],process_all_access:3,processhandl:3,processid:2,processinform:3,processinformationclass:3,processinformationlength:3,processor:[],product:2,product_typ:2,profession:[],profil:2,prog:2,program:[],progress:1,project:[],properti:0,prot:[],protect:[0,2],protocol:1,prov:[0,2],prov_rsa_ful:2,provid:[0,3],proxi:3,pscatinfo:3,psecdesc:3,psid:3,psignaturealgorithm:3,pstarttim:3,psubjectissuerblob:3,pszcontain:[0,3],pszfilenam:3,pszgroupnam:3,psznamestr:3,pszobjid:2,pszprovid:[0,3],pszx500:3,ptcprow:3,ptcptabl:3,ptime:3,ptr:[],pulen:3,punkout:3,purpos:[],push:2,put:1,pvdata:3,pvencod:3,pvfindpara:3,pvobject:3,pvoid:2,pvpara:3,pvparamet:3,pvreserv:3,pvstructinfo:3,pvtypepara:3,pwszcontainernam:2,pwszprovnam:2,pwvtdata:3,pycod:[],pyhkei:2,python27:2,python32:2,python64:2,python:2,python_cod:2,python_execut:2,pythondll_modul:2,pythonforwindow:2,pythonforwindowstmpcontain:2,pythont:3,pythonxx:2,qhsszio1k5n1udlpfwtn29buglsrttxpv5ocfntlo:2,queri:[],query_memori:[],querydosdevicea:3,querydosdevicew:3,queryworkingsetexwrapp:3,queryworkingsetwrapp:3,question:2,quit:[],qword:[],r10:2,r11:2,r12:2,r13:2,r14:2,r15:2,rais:[0,2,3],randint:[],random:0,rang:2,raw64:[],raw:[0,2],raw_cert:2,raw_seri:[0,2],rax:2,rbp:2,rbx:2,rclsid:3,rcx:2,rdata:2,rdi:2,rdx:2,read:[0,2],read_byt:[],read_dword:[],read_memori:2,read_memory_into:[],read_ptr:2,read_qword:[],read_short:[],read_str:[],read_wstr:2,readfil:3,readprocessmemori:3,real:0,real_funct:2,receivemessag:3,receivemessageattribut:3,recent:[2,3],record:[],redirect:[],refcount:0,refer:[],reg:2,reg_nam:[],regclosekei:3,reggetvaluea:3,reggetvaluew:3,regist:2,register_start:2,registered_own:2,registeredown:2,registri:1,regopenkeyexa:[2,3],regopenkeyexa_iat:2,regopenkeyexacallback:2,regopenkeyexw:3,regqueryvalueexa:3,regqueryvalueexw:3,regroup:[],reject:[],relat:1,releas:2,reli:3,reloc:2,remot:[],remote_addr:2,remote_address:[],remote_calc:[],remote_cod:2,remote_host:[],remote_port:2,remote_process:2,remote_proto:[],remote_veh_segv:2,remotectyp:1,remoteloadedmodul:2,remotemanualloadlibrai:[],remotepeb32:[],remotepeb64:[],remotepeb:2,remotepythonerror:2,remotewinunicodestr:2,remov:[],remove_hook:[],removevectoredexceptionhandl:3,replac:2,report_ctx_diff:2,repr:2,repres:0,represent:[0,2],req:[],request:1,requir:2,requiredbuffers:3,requiredserversid:3,res:2,res_15:[],res_1:[],res_3:[],res_5:[],reserv:3,reset:2,resolut:[],resolv:[],respect:2,restartscan:3,restor:[],restore_all_memory_breakpoint:[],result:[2,3],resultat:[],resum:2,resumethread:3,ret:2,ret_trigg:2,ret_valu:2,retriev:0,retrycr:[0,2],returnedlength:3,returnlength:3,returnsingleentri:3,revers:[],rewrit:2,rewritebreakpoint:2,rewrot:[],rgprecipientcert:3,rgprovparam:2,right:[],riid:3,rip:2,rip_info:[],rlxmnhc8jtgzk96czmdbpauuwdachnmtkiwqf6axzsbbwsekqejvdbygaocuiyh4:2,root:2,root_stor:2,rsa:2,rsi:2,rsp:2,rsrc:2,rtldecompressbuff:3,rtype:[],rule:[],run:2,rw0:[],rw1:[],rw2:[],rw3:[],rwx:2,sad:[],safe:2,sai:2,sam:[],samdesir:[2,3],same:[],sampl:[0,1],save:0,sbgna5cjtxqc7iyp9c7rxbmthv5bnftonsn6d9n8zu:2,sc_manager_all_access:3,scale:[],se_debug_nam:[],search:1,secret:2,section:2,secur:2,securityinfo:3,see:[0,2],seg:[],segc:[],segd:[],sege:[],segf:[],segfault:[],segg:[],segment:[],segss:[],select:2,selector:[],self:[0,2,3],selfsign:0,send:2,sendmessag:3,sendmessageattribut:3,serial:[0,2],serv:2,server:[],serversecurityrequir:3,servic:[1,2],service_continue_pend:[],service_file_system_driv:[],service_interactive_process:[],service_kernel_driv:2,service_nam:[],service_paus:[],service_pause_pend:[],service_run:2,service_runs_in_system_process:[],service_start_pend:[],service_stop:[],service_stop_pend:[],service_win32_own_process:[],service_win32_share_process:2,servicea:2,servicestatu:2,set:[2,3],set_context:2,set_default:2,set_hook:2,set_syswow_context:[],setattr:2,setconsolectrlhandl:3,setstdhandl:3,settcpentri:3,setthreadaffinitymask:3,setthreadcontext:3,settokeninform:3,setup:2,setup_target_context:2,sha1:2,sha256:2,shareaccess:3,shell32:2,shellcod:[],shellexecutea:3,shellexecutew:3,should:0,show_window:[],sid:3,side:[],sign:[0,2],sign_info:2,signatur:[1,2],signature_algo:[0,2],signer:[0,2],signer_certif:[],simpl:[0,2],simple_x64:[1,2],simple_x86:[1,2],simpler:[],simpli:[],singl:[],single_step:2,single_step_count:2,singlesteponwrit:2,singlesteppingdebugg:2,size:2,sizeof:[],sizeofcod:2,sleep:2,socket:1,softwar:2,softwaretyp:2,sofwar:2,sogeti:[],some:[0,2,3],some_export:2,someth:[],soon:[],sourc:0,space:[],special:3,specifi:2,split:2,src:2,stack:2,stackoverflow:2,standard:[],standard_bp:[],start:2,start_addr:2,start_address:[],start_regist:2,start_valu:2,startswith:2,startup:2,state:2,staticcach:2,statu:2,stdin:3,stdout:[],step:[],still:[],still_act:[],storag:3,store:[0,2],store_const:2,store_nam:0,store_tru:2,str:[0,2],string:[0,2],stringsid:3,strip:2,strlen:[],strlena32:[],strlena64:[],strlenw32:[],strlenw64:[],struct:[],structur:[0,1],stub:[],stuff:2,subclass:3,subcommand:2,subject:0,subkei:2,subkeys_nam:2,submodul:[],subpars:2,success:[],support:0,sure:[],surkei:[],suspend:2,suspendthread:3,svchost:2,sys:2,system32:2,system:[0,1],systeminform:3,systeminformationclass:3,systeminformationlength:3,syswow64:[1,2],syswow64apiproxi:[],syswow:[],szoid_nist_aes128_cbc:0,szoid_nist_aes192_cbc:0,szoid_nist_aes256_cbc:0,szoid_oiwsec_descbc:0,szoid_rsa_des_ede3_cbc:0,szoid_rsa_sha256rsa:2,szpassword:[2,3],tableclass:3,tagclsctx:3,tagcoinit:3,tagthreadentry32:[],take:3,talk:[],target:2,target_addr:2,target_fil:2,target_func:2,target_host:2,target_nam:2,target_pag:2,target_port:2,targetedbit:[],tcp4:[],tcp4connect:[],tcp6:[],tcp6connect:[],tcp:2,tcp_table_owner_pid_al:3,teb:[],teb_bas:[],techniqu:[],tell:0,temporari:0,termin:[],terminaison:2,terminateprocess:3,terminatethread:3,test:2,test_cod:2,test_code_x64:2,test_code_x86:2,text:2,th32processid:3,thei:2,them:[],themself:[],thi:[0,2,3],thing:3,thisit:[],those:[],thread32first:3,thread32next:3,thread:[1,2,3],thread_all_access:3,thread_exec:2,threadhandl:3,threadinform:3,threadinformationclass:3,threadinformationlength:3,three:[],through:[],tid:[],time:[0,2,3],time_info:[],timeinfo:[],timeout:3,tmp:2,to_dump:[],todo:[],token:[],tokenhandl:3,tokeninform:3,tokeninformationclass:3,tokeninformationlength:3,trace:2,traceback:[2,3],transform:[],transform_type_to_remote32bit:[],transform_type_to_remote64bit:[],transpar:3,tri:3,trigger:2,trivial:[],trust:[0,2],trust_e_nosignatur:2,try_generate_stub_target:[],tupl:[],two:[],txt:2,type:[0,2],typeerror:3,typenam:2,ucchmax:3,uexitcod:3,ugli:[],ukvab:2,ulaf:3,ulong64:[],ulopt:[2,3],ultra:[],uncompressedbuff:3,uncompressedbuffers:3,unicod:[],unicode_string_addr:2,unknow:[],unknown1:3,unknown2:3,unknown:[2,3],unload_dl:[],unstabl:[],usabl:[],use:[0,2],used:[0,2],useful:2,user:2,usermodetim:2,usernam:[],using:[0,1],utf16:[],utf8:[],util:[1,2],uxthem:2,valid:2,valu:[0,2,3],value_nam:[],valueerror:2,vari:[],variabl:2,variant_bool:2,variou:3,vector:0,vectorcontrol:[],vectoredexcept:1,vectoredhandl:3,vectorregist:[],veh:2,veh_segv:2,vendorid:[],ver_nt_domain_control:[],ver_nt_serv:[],ver_nt_workst:2,verif:2,verifi:2,verqueryvaluea:3,verqueryvaluew:3,version:2,version_nam:2,via:2,view:[],vif:[],vip:[],virtual_alloc:2,virtual_fre:[],virtual_protect:[],virtualalloc:[1,2],virtualallocex:3,virtualfre:3,virtualfreeex:3,virtualprotect:[2,3],virtualprotectex:3,virtualqueryex:3,vista:[],vol:2,volatil:2,volum:1,vsvmktr:2,vtabl:[],vtbtmfegccsgaqufbzachkvodhrwoi8vd3d3lm1py3jvc29mdc5jb20vcgtpb3bz:2,wai:2,wait:2,waitfordebugev:3,waitforsingleobject:3,want:[],wchvemxqxk5eofne6yekuarbgbmnwltfrpwklmvtnl9r:2,whatev:[],when:[],where:[],which:[],whole:[],wide:[],win32:[],win32_logicaldisk:2,win32_process:2,wincfunc:[],windef:2,window:1,windowfrompoint:3,windows_info:2,windowscert:2,windowserror:[2,3],windowsvers:2,winerror:0,winfunc:[2,3],winmm:2,winobject:2,winoject:2,winprocess:[],winproxi:[1,2],winstruct:2,winsx:2,winthread:2,wintrust:1,winunicodestr:2,winverifytrust:3,without:[2,3],wmi:1,wmi_request:2,wmirequest:2,won:[],word:[],work:[1,2],workaround:[],would:2,wow64disablewow64fsredirect:3,wow64enablewow64fsredirect:3,wow64fsenableredirect:3,wow64getthreadcontext:3,wow64revertwow64fsredirect:3,wow64setthreadcontext:3,wrap:[],wrapper:[0,3],write:[0,2],write_byt:[],write_code_in_target:2,write_dword:[],write_memori:2,write_qword:[],write_short:[],writefil:3,writeprocessmemori:3,wrote:2,wstring:[],wstring_addr:2,wvalu:2,x000:2,x001:2,x00:2,x00u:[],x010:2,x01:2,x01t:2,x02:2,x02us1:2,x03:2,x03u:2,x040:2,x04:2,x04f:[],x05:2,x05y:2,x06:2,x07:2,x07redmond1:2,x08:2,x0b0:2,x0c:2,x0e:2,x100:2,x10:2,x10w:2,x11:2,x11u:2,x12x:2,x130:2,x133:2,x13:2,x14:2,x14f:2,x151:2,x15microsoft:2,x17:2,x18:2,x19:2,x1am:2,x1av:2,x1b:2,x1c:2,x1e0:2,x1f:2,x64:[1,2],x64_cpuid:[],x7f:2,x80:2,x80v:2,x81:2,x82:2,x841:2,x84:[],x84qy:2,x86:[1,2],x86_cpuid:[],x86_microsoft:2,x86cpuidresult:[],x86h:2,x870:2,x89:2,x8b:[],x8ba:[],x8bn:[],x8bq:[],x8c:2,x8ez:2,x90:2,x91:2,x93:2,x94:2,x977:[],x99cea:2,xa0:2,xa2d:2,xa4:2,xa6:2,xa6uo:2,xaahpj:2,xaam:2,xabnzr:2,xabo:2,xac:2,xad:2,xaf:2,xb2:2,xb3:2,xb8:2,xb9:2,xb9k:2,xbb:2,xbbybpu6:2,xbc:2,xc0:2,xc0bbbb:[],xc2:2,xc2rg:2,xc30:2,xc3:[],xc6:2,xc7:[],xc8:2,xca:2,xcc:2,xcctv:2,xcd:2,xce:2,xd0z:2,xd1n:2,xd2m:2,xd4:2,xd4j:2,xd8:[],xd8t:2,xd9:2,xdc:2,xe0lwf:2,xe1:2,xe3:2,xe5:2,xe7:2,xe8:2,xe9:2,xeb:[],xec:2,xeckk:2,xed9:2,xed:2,xedf:2,xee:[],xef1:[],xef:[],xf2:2,xf3:2,xf5:2,xf7:2,xf8:2,xf9:2,xfal:2,xfd:2,xfe:[],xor:[],y3jsl01py1dpblbyb1bdqtiwmtffmjaxms0xmc0xos5jcmwwyqyikwybbquhaqe:2,yaeno:2,yet:0,ygawibagitmwaaaqzuwyxemckydgaaaaabbjanbgkqhkig9w0baqsf:2,yield:[],yolocertif:2,yolohxbp:2,yop:2,you:2,your:[],yourself:[],yun:2,z5pmuf8va9tmfqg:2,zdexmge1yzq1ntuymb8ga1udiwqymbaafkkpajmofssxem2q:2,znqgq29ycg9yyxrpb24xgjaybgnvbamteu1py3jvc29mdcbxaw5kb3dzmiibijan:2},titles:["9. windows.crypto – CryptoAPI","Welcome to PythonForWindows’s documentation!","13. Samples of code","4. windows.winproxy – Windows API"],titleterms:{"function":3,The:[],Using:[],api:3,argument:[],assembl:[],breakpoint:[],callback:[],certif:[0,2],certificatecontext:0,check:[],code:2,com:2,compon:0,connect:[],context:[],cpuid:[],cross:[],cryptcontext:0,crypto:[0,2],cryptoapi:0,cryptobject:0,current:2,current_process:2,currentprocess:[],currentthread:[],debug:2,debugg:2,decrypt:0,demo:2,disablewow64fsredirect:[],document:1,drive:[],earli:[],ehcertstor:0,encrypt:[0,2],exampl:3,except:[],execut:[],explor:2,firewal:[],functionbp:2,gate:[],gener:0,generate_kei:0,generate_pfx:0,generate_selfsigned_certif:0,handl:[],heaven:[],helper:[],hook:2,iat:2,iatentri:[],implement:[],import_pfx:0,indic:1,inetfwpolicy2:2,info:[],inform:[],interfac:[],intern:[],keyvalu:[],load:[],loadedmodul:[],local:2,localdebugg:2,logic:[],make:2,manag:[],model:[],modul:[],nativ:2,native_exec:[],nativeutil:[],network:2,object:[],pars:[],pe_pars:[],peb:2,pefil:[],pointer:[],process:2,progress:[],protocol:[],put:[],pyhkei:[],pythonforwindow:1,record:[],registri:2,relat:[],remot:2,remotectyp:[],request:2,sampl:2,servic:[],signatur:[],signaturedata:[],simple_x64:[],simple_x86:[],singl:2,socket:2,step:2,structur:[],system:2,syswow64:[],tabl:1,tester:2,testeur:[],thread:[],token:[],type:[],using:2,util:[],vector:[],vectoredexcept:2,virtualalloc:3,virtualprotect:[],volum:[],welcom:1,window:[0,2,3],winprocess:2,winproxi:3,winthread:[],wintrust:2,wmi:2,work:[],x64:[],x86:[]}}) \ No newline at end of file +Search.setIndex({docnames:["com","crypto","debug","exception","handle","iat_hook","index","internals","native_exec","network","process","registry","sample","service","utils","various","volume","windows","winproxy","wintrust","wip","wmi"],envversion:50,filenames:["com.rst","crypto.rst","debug.rst","exception.rst","handle.rst","iat_hook.rst","index.rst","internals.rst","native_exec.rst","network.rst","process.rst","registry.rst","sample.rst","service.rst","utils.rst","various.rst","volume.rst","windows.rst","winproxy.rst","wintrust.rst","wip.rst","wmi.rst"],objects:{"windows.crypto":{CertificateContext:[1,1,1,""],CryptContext:[1,1,1,""],CryptObject:[1,1,1,""],EHCERTSTORE:[1,1,1,""],decrypt:[1,5,1,""],encrypt:[1,5,1,""],generation:[1,0,0,"-"],import_pfx:[1,5,1,""]},"windows.crypto.CertificateContext":{chains:[1,2,1,""],contents:[1,2,1,""],duplicate:[1,3,1,""],encoded:[1,2,1,""],from_buffer:[1,4,1,""],from_file:[1,4,1,""],get_name:[1,3,1,""],issuer:[1,2,1,""],name:[1,2,1,""],raw_serial:[1,2,1,""],serial:[1,2,1,""],store:[1,2,1,""]},"windows.crypto.CryptContext":{contents:[1,2,1,""]},"windows.crypto.CryptObject":{cert:[1,2,1,""],get_cert:[1,3,1,""],get_signer_certificate:[1,3,1,""],get_signer_data:[1,3,1,""],nb_cert:[1,2,1,""],nb_signer:[1,2,1,""]},"windows.crypto.EHCERTSTORE":{add_certificate:[1,3,1,""],certs:[1,2,1,""],from_file:[1,4,1,""],from_system_store:[1,4,1,""],new_in_memory:[1,4,1,""],value:[1,2,1,""]},"windows.crypto.generation":{generate_key:[1,5,1,""],generate_pfx:[1,5,1,""],generate_selfsigned_certificate:[1,5,1,""]},"windows.debug":{Breakpoint:[2,1,1,""],Debugger:[2,1,1,""],FunctionBP:[2,1,1,""],HXBreakpoint:[2,1,1,""],LocalDebugger:[2,1,1,""],MemoryBreakpoint:[2,1,1,""]},"windows.debug.Breakpoint":{trigger:[2,3,1,""]},"windows.debug.Debugger":{DisabledMemoryBreakpoint:[2,3,1,""],__init__:[2,3,1,""],add_bp:[2,3,1,""],attach:[2,4,1,""],debug:[2,4,1,""],del_bp:[2,3,1,""],detach:[2,3,1,""],disable_all_memory_breakpoints:[2,3,1,""],get_exception_bitness:[2,3,1,""],get_memory_breakpoint_at:[2,3,1,""],loop:[2,3,1,""],on_create_process:[2,3,1,""],on_create_thread:[2,3,1,""],on_exception:[2,3,1,""],on_exit_process:[2,3,1,""],on_exit_thread:[2,3,1,""],on_load_dll:[2,3,1,""],on_output_debug_string:[2,3,1,""],on_rip:[2,3,1,""],on_single_step:[2,3,1,""],on_unload_dll:[2,3,1,""],restore_all_memory_breakpoints:[2,3,1,""],single_step:[2,3,1,""]},"windows.debug.FunctionBP":{break_on_ret:[2,3,1,""],extract_arguments:[2,3,1,""],ret_trigger:[2,3,1,""],trigger:[2,3,1,""]},"windows.debug.HXBreakpoint":{trigger:[2,3,1,""]},"windows.debug.LocalDebugger":{add_bp:[2,3,1,""],del_bp:[2,3,1,""],get_exception_code:[2,3,1,""],get_exception_context:[2,3,1,""],on_exception:[2,3,1,""],single_step:[2,3,1,""]},"windows.debug.MemoryBreakpoint":{__init__:[2,3,1,""],trigger:[2,3,1,""]},"windows.hooks":{Callback:[5,1,1,""],IATHook:[5,1,1,""]},"windows.hooks.IATHook":{disable:[5,3,1,""],enable:[5,3,1,""]},"windows.native_exec":{cpuid:[8,0,0,"-"],create_function:[8,5,1,""],nativeutils:[8,0,0,"-"],simple_x64:[8,0,0,"-"],simple_x86:[8,0,0,"-"]},"windows.native_exec.cpuid":{X86CpuidResult:[8,1,1,""],do_cpuid:[8,5,1,""],get_proc_family_model:[8,5,1,""],get_vendor_id:[8,5,1,""],is_amd_proc:[8,5,1,""],is_intel_proc:[8,5,1,""],x64_cpuid:[8,5,1,""],x86_cpuid:[8,5,1,""]},"windows.native_exec.cpuid.X86CpuidResult":{fields:[8,2,1,""]},"windows.native_exec.simple_x86":{create_displacement:[8,5,1,""],deref:[8,5,1,""],mem:[8,5,1,""],mem_access:[8,1,1,""]},"windows.native_exec.simple_x86.mem_access":{base:[8,2,1,""],disp:[8,2,1,""],index:[8,2,1,""],prefix:[8,2,1,""],scale:[8,2,1,""]},"windows.pe_parse":{GetPEFile:[10,5,1,""],IATEntry:[10,1,1,""],PEFile:[10,1,1,""]},"windows.pe_parse.IATEntry":{addr:[10,6,1,""],name:[10,6,1,""],ord:[10,6,1,""],remove_hook:[10,3,1,""],set_hook:[10,3,1,""],value:[10,6,1,""]},"windows.pe_parse.PEFile":{export_name:[10,2,1,""],exports:[10,2,1,""],imports:[10,2,1,""]},"windows.remotectypes":{transform_type_to_remote32bits:[7,5,1,""],transform_type_to_remote64bits:[7,5,1,""]},"windows.syswow64":{LdrLoadDll_32_to_64:[7,5,1,""],NtCreateThreadEx_32_to_64:[7,5,1,""],NtGetContextThread_32_to_64:[7,5,1,""],NtQueryInformationProcess_32_to_64:[7,5,1,""],NtQueryInformationThread_32_to_64:[7,5,1,""],NtQueryVirtualMemory_32_to_64:[7,5,1,""],NtSetContextThread_32_to_64:[7,5,1,""],Syswow64ApiProxy:[7,1,1,""],execute_64bits_code_from_syswow:[7,5,1,""],generate_syswow64_call:[7,5,1,""],try_generate_stub_target:[7,5,1,""]},"windows.utils":{DisableWow64FsRedirection:[14,1,1,""],VirtualProtected:[14,1,1,""],check_debug:[14,5,1,""],check_is_elevated:[14,5,1,""],create_console:[14,5,1,""],create_file_from_handle:[14,5,1,""],create_process:[14,5,1,""],enable_privilege:[14,5,1,""],get_handle_from_file:[14,5,1,""],pop_shell:[14,5,1,""]},"windows.winobject":{exception:[3,0,0,"-"],handle:[4,0,0,"-"],network:[9,0,0,"-"],process:[10,0,0,"-"],registry:[11,0,0,"-"],service:[13,0,0,"-"],volume:[16,0,0,"-"],wmi:[21,0,0,"-"]},"windows.winobject.exception":{ECONTEXT32:[3,1,1,""],ECONTEXT64:[3,1,1,""],ECONTEXTWOW64:[3,1,1,""],EDr7:[3,1,1,""],EEXCEPTION_DEBUG_INFO32:[3,1,1,""],EEXCEPTION_DEBUG_INFO64:[3,1,1,""],EEXCEPTION_POINTERS:[3,1,1,""],EEXCEPTION_RECORD32:[3,1,1,""],EEXCEPTION_RECORD64:[3,1,1,""],EEXCEPTION_RECORD:[3,1,1,""],EEflags:[3,1,1,""],VectoredException:[3,1,1,""]},"windows.winobject.exception.ECONTEXT32":{EDr7:[3,2,1,""],EEFlags:[3,2,1,""],dump:[3,3,1,""],fields:[3,2,1,""],func_result:[3,2,1,""],pc:[3,2,1,""],regs:[3,3,1,""],sp:[3,2,1,""]},"windows.winobject.exception.ECONTEXT64":{EDr7:[3,2,1,""],EEFlags:[3,2,1,""],dump:[3,3,1,""],fields:[3,2,1,""],func_result:[3,2,1,""],new_aligned:[3,4,1,""],pc:[3,2,1,""],regs:[3,3,1,""],sp:[3,2,1,""]},"windows.winobject.exception.ECONTEXTWOW64":{EDr7:[3,2,1,""],EEFlags:[3,2,1,""],dump:[3,3,1,""],fields:[3,2,1,""],func_result:[3,2,1,""],pc:[3,2,1,""],regs:[3,3,1,""],sp:[3,2,1,""]},"windows.winobject.exception.EDr7":{fields:[3,2,1,""]},"windows.winobject.exception.EEXCEPTION_DEBUG_INFO32":{ExceptionRecord:[3,6,1,""],fields:[3,2,1,""]},"windows.winobject.exception.EEXCEPTION_DEBUG_INFO64":{ExceptionRecord:[3,6,1,""],fields:[3,2,1,""]},"windows.winobject.exception.EEXCEPTION_POINTERS":{ContextRecord:[3,6,1,""],ExceptionRecord:[3,6,1,""],dump:[3,3,1,""]},"windows.winobject.exception.EEXCEPTION_RECORD":{ExceptionAddress:[3,2,1,""],ExceptionCode:[3,2,1,""],fields:[3,2,1,""]},"windows.winobject.exception.EEXCEPTION_RECORD32":{ExceptionAddress:[3,2,1,""],ExceptionCode:[3,2,1,""],fields:[3,2,1,""]},"windows.winobject.exception.EEXCEPTION_RECORD64":{ExceptionAddress:[3,2,1,""],ExceptionCode:[3,2,1,""],fields:[3,2,1,""]},"windows.winobject.exception.EEflags":{fields:[3,2,1,""],raw:[3,2,1,""]},"windows.winobject.handle":{Handle:[4,1,1,""]},"windows.winobject.handle.Handle":{infos:[4,2,1,""],local_handle:[4,2,1,""],name:[4,2,1,""],process:[4,2,1,""],type:[4,2,1,""]},"windows.winobject.network":{Firewall:[9,1,1,""],FirewallRule:[9,1,1,""],Network:[9,1,1,""],TCP4Connection:[9,1,1,""],TCP6Connection:[9,1,1,""]},"windows.winobject.network.Firewall":{current_profile_types:[9,2,1,""],enabled:[9,2,1,""],rules:[9,2,1,""],value:[9,2,1,""]},"windows.winobject.network.FirewallRule":{action:[9,2,1,""],application_name:[9,2,1,""],description:[9,2,1,""],direction:[9,2,1,""],enabled:[9,2,1,""],grouping:[9,2,1,""],interface_types:[9,2,1,""],local_address:[9,2,1,""],local_port:[9,2,1,""],name:[9,2,1,""],protocol:[9,2,1,""],remote_address:[9,2,1,""],remote_port:[9,2,1,""],service_name:[9,2,1,""],value:[9,2,1,""]},"windows.winobject.network.Network":{firewall:[9,2,1,""],ipv4:[9,2,1,""],ipv6:[9,2,1,""]},"windows.winobject.network.TCP4Connection":{close:[9,3,1,""],established:[9,2,1,""],local_addr:[9,2,1,""],local_port:[9,2,1,""],remote_addr:[9,2,1,""],remote_host:[9,2,1,""],remote_port:[9,2,1,""],remote_proto:[9,2,1,""]},"windows.winobject.network.TCP6Connection":{established:[9,2,1,""],local_addr:[9,2,1,""],local_port:[9,2,1,""],remote_addr:[9,2,1,""],remote_host:[9,2,1,""],remote_port:[9,2,1,""],remote_proto:[9,2,1,""]},"windows.winobject.process":{CurrentProcess:[10,1,1,""],CurrentThread:[10,1,1,""],DeadThread:[10,1,1,""],LoadedModule:[10,1,1,""],PEB:[10,1,1,""],Token:[10,1,1,""],WinProcess:[10,1,1,""],WinThread:[10,1,1,""],WinUnicodeString:[10,1,1,""]},"windows.winobject.process.CurrentProcess":{allocated_memory:[10,3,1,""],bitness:[10,2,1,""],create_thread:[10,3,1,""],execute:[10,3,1,""],exit:[10,3,1,""],exit_code:[10,2,1,""],get_mapped_filename:[10,3,1,""],handle:[10,2,1,""],is_exit:[10,2,1,""],is_wow_64:[10,2,1,""],memory_state:[10,3,1,""],peb:[10,2,1,""],peb_syswow:[10,2,1,""],pid:[10,2,1,""],ppid:[10,2,1,""],query_memory:[10,3,1,""],read_byte:[10,3,1,""],read_dword:[10,3,1,""],read_memory:[10,3,1,""],read_ptr:[10,3,1,""],read_qword:[10,3,1,""],read_short:[10,3,1,""],read_string:[10,3,1,""],read_wstring:[10,3,1,""],threads:[10,2,1,""],time_info:[10,2,1,""],virtual_alloc:[10,3,1,""],virtual_free:[10,3,1,""],virtual_protect:[10,3,1,""],virtual_protected:[10,3,1,""],wait:[10,3,1,""],write_byte:[10,3,1,""],write_dword:[10,3,1,""],write_memory:[10,3,1,""],write_qword:[10,3,1,""],write_short:[10,3,1,""]},"windows.winobject.process.CurrentThread":{exit:[10,3,1,""],handle:[10,2,1,""],owner:[10,2,1,""],tid:[10,2,1,""],wait:[10,3,1,""]},"windows.winobject.process.DeadThread":{exit_code:[10,2,1,""],handle:[10,2,1,""],is_exit:[10,2,1,""],wait:[10,3,1,""]},"windows.winobject.process.LoadedModule":{baseaddr:[10,2,1,""],fullname:[10,2,1,""],name:[10,2,1,""],pe:[10,2,1,""]},"windows.winobject.process.PEB":{commandline:[10,2,1,""],imagepath:[10,2,1,""],modules:[10,2,1,""]},"windows.winobject.process.Token":{computername:[10,2,1,""],handle:[10,2,1,""],integrity:[10,2,1,""],is_elevated:[10,2,1,""],username:[10,2,1,""],wait:[10,3,1,""]},"windows.winobject.process.WinProcess":{allocated_memory:[10,3,1,""],bitness:[10,2,1,""],create_thread:[10,3,1,""],execute:[10,3,1,""],execute_python:[10,3,1,""],execute_python_unsafe:[10,3,1,""],exit:[10,3,1,""],exit_code:[10,2,1,""],get_mapped_filename:[10,3,1,""],handle:[10,2,1,""],is_exit:[10,2,1,""],is_wow_64:[10,2,1,""],load_library:[10,3,1,""],memory_state:[10,3,1,""],name:[10,2,1,""],peb:[10,2,1,""],peb_addr:[10,2,1,""],peb_syswow:[10,2,1,""],pid:[10,2,1,""],ppid:[10,2,1,""],query_memory:[10,3,1,""],read_byte:[10,3,1,""],read_dword:[10,3,1,""],read_memory:[10,3,1,""],read_memory_into:[10,3,1,""],read_ptr:[10,3,1,""],read_qword:[10,3,1,""],read_short:[10,3,1,""],read_string:[10,3,1,""],read_wstring:[10,3,1,""],threads:[10,2,1,""],time_info:[10,2,1,""],virtual_alloc:[10,3,1,""],virtual_free:[10,3,1,""],virtual_protect:[10,3,1,""],virtual_protected:[10,3,1,""],wait:[10,3,1,""],write_byte:[10,3,1,""],write_dword:[10,3,1,""],write_memory:[10,3,1,""],write_qword:[10,3,1,""],write_short:[10,3,1,""]},"windows.winobject.process.WinThread":{context:[10,2,1,""],context_syswow:[10,2,1,""],exit:[10,3,1,""],exit_code:[10,2,1,""],handle:[10,2,1,""],is_exit:[10,2,1,""],owner:[10,2,1,""],resume:[10,3,1,""],set_context:[10,3,1,""],set_syswow_context:[10,3,1,""],start_address:[10,2,1,""],suspend:[10,3,1,""],teb_base:[10,2,1,""],tid:[10,2,1,""],wait:[10,3,1,""]},"windows.winobject.process.WinUnicodeString":{fields:[10,2,1,""],str:[10,2,1,""]},"windows.winobject.registry":{KeyValue:[11,1,1,""],PyHKey:[11,1,1,""],Registry:[11,1,1,""]},"windows.winobject.registry.KeyValue":{name:[11,2,1,""],type:[11,2,1,""],value:[11,2,1,""]},"windows.winobject.registry.PyHKey":{__call__:[11,5,1,""],__getitem__:[11,5,1,""],__setitem__:[11,5,1,""],get:[11,3,1,""],open_subkey:[11,3,1,""],set:[11,3,1,""],subkeys:[11,2,1,""],values:[11,2,1,""]},"windows.winobject.service":{ServiceA:[13,1,1,""],ServiceStatus:[13,1,1,""]},"windows.winobject.service.ServiceA":{description:[13,2,1,""],name:[13,2,1,""],process:[13,2,1,""],status:[13,2,1,""]},"windows.winobject.service.ServiceStatus":{control_accepted:[13,2,1,""],flags:[13,2,1,""],state:[13,2,1,""],type:[13,2,1,""]},"windows.winobject.system":{System:[17,1,1,""]},"windows.winobject.system.System":{bitness:[17,2,1,""],computer_name:[17,2,1,""],handles:[17,2,1,""],logicaldrives:[17,2,1,""],network:[17,2,1,""],processes:[17,2,1,""],product_type:[17,2,1,""],registry:[17,2,1,""],services:[17,2,1,""],threads:[17,2,1,""],version:[17,2,1,""],version_name:[17,2,1,""],wmi:[17,2,1,""]},"windows.winobject.volume":{LogicalDrive:[16,1,1,""]},"windows.winobject.volume.LogicalDrive":{name:[16,6,1,""],path:[16,2,1,""],type:[16,2,1,""]},"windows.winobject.wmi":{WmiRequester:[21,1,1,""]},"windows.winobject.wmi.WmiRequester":{select:[21,3,1,""]},"windows.wintrust":{SignatureData:[19,1,1,""],check_signature:[19,5,1,""],full_signature_information:[19,5,1,""],is_signed:[19,5,1,""]},"windows.wintrust.SignatureData":{additionalinfo:[19,2,1,""],catalog:[19,2,1,""],catalogsigned:[19,2,1,""],signed:[19,2,1,""]},windows:{com:[0,0,0,"-"],crypto:[1,0,0,"-"],debug:[2,0,0,"-"],hooks:[5,0,0,"-"],native_exec:[8,0,0,"-"],pe_parse:[10,0,0,"-"],remotectypes:[7,0,0,"-"],syswow64:[7,0,0,"-"],utils:[14,0,0,"-"],winproxy:[18,0,0,"-"],wintrust:[19,0,0,"-"]}},objnames:{"0":["py","module","Python module"],"1":["py","class","Python class"],"2":["py","attribute","Python attribute"],"3":["py","method","Python method"],"4":["py","classmethod","Python class method"],"5":["py","function","Python function"],"6":["py","data","Python data"]},objtypes:{"0":"py:module","1":"py:class","2":"py:attribute","3":"py:method","4":"py:classmethod","5":"py:function","6":"py:data"},terms:{"00c04fc295ee":12,"02x":12,"059cb1ba1a41433a18dd8f87422c2ac3bf35b7b8":12,"08x":12,"0x0":12,"0x02649b70":12,"0x026ddd00":[],"0x0272d350":12,"0x02941290":12,"0x02b37ef0":12,"0x02dc8210":12,"0x02ed63f0":18,"0x030a2590":12,"0x03243770":8,"0x0330d990":8,"0x03f6cda0":12,"0x04c87c90":[],"0x04c87cb0":[],"0x0c000000d":8,"0x0l":[9,12,16,18],"0x1":8,"0x10":[2,8,12],"0x1000":[12,18],"0x10002":12,"0x1000l":18,"0x100l":13,"0x10202":12,"0x10202l":12,"0x108":12,"0x10l":13,"0x11111111":8,"0x11223344":12,"0x11223344l":12,"0x12345678":12,"0x12d687":12,"0x1337":12,"0x1337l":12,"0x154":12,"0x1b":12,"0x1d1ab574":12,"0x1db0000":12,"0x1db0010":12,"0x1f03ffl":18,"0x1f0fffl":18,"0x1l":[1,9,12,13,16,17,18],"0x2":8,"0x200":12,"0x20019l":11,"0x200l":12,"0x202l":12,"0x20590b3ccbc":12,"0x205a1d60000":12,"0x205a1d60000l":12,"0x20l":[12,13],"0x23":7,"0x2649c60":12,"0x2649d50":12,"0x26ddc60":[],"0x26dde40":[],"0x26ddee0":[],"0x26ddf30":[],"0x272a030":12,"0x272a080":12,"0x272acb0":12,"0x272ad00":12,"0x272ad50":12,"0x272ada0":12,"0x27bd5d0":[],"0x27f7f30":[],"0x27f7f80":[],"0x27fa030":[],"0x2a":12,"0x2e64750":12,"0x2l":[9,12,13,16,17],"0x31200efe":12,"0x32d3210":12,"0x33":7,"0x3bfae4l":12,"0x3f0000":12,"0x3f0000l":12,"0x3f0007":12,"0x3f0007l":12,"0x3f6ce40":12,"0x3f6cee0":12,"0x3f6cf30":12,"0x3f6cf80":12,"0x3ffel":1,"0x3l":[12,13,16,17,18],"0x4":12,"0x40ce850":12,"0x40l":[10,18],"0x41":12,"0x41faee0":12,"0x41faf30":12,"0x42":12,"0x424242":12,"0x42424242":[8,12,14],"0x4242424243434343":12,"0x4242424243434343l":12,"0x4242424243444546":5,"0x42424242l":12,"0x4l":[1,9,12,13,16,18],"0x5a6000l":12,"0x5c90000":[],"0x5l":[13,16,18],"0x6f80000":12,"0x6l":[13,16],"0x7":12,"0x770d7c04":12,"0x774c0000":12,"0x77541128l":12,"0x77a73bad":12,"0x77ae3c7d":12,"0x7f":12,"0x7ffa3c700000l":12,"0x7ffa3c70f0f0l":12,"0x7ffa3c70f0f5l":12,"0x7ffa3c70f0fal":12,"0x7ffa3c70f0ffl":12,"0x7ffa3c70f100l":12,"0x7l":13,"0x8":12,"0x80000000l":18,"0x80000001l":12,"0x80000003l":12,"0x80000004l":12,"0x8000l":18,"0x8009200c":1,"0x800b0100l":12,"0x80l":18,"0x8984848":12,"0x8d0006":12,"0x8d000c":12,"0x8d0011":12,"0x8d0017":12,"0x8d001c":12,"0x8d0022":12,"0x8d0023":12,"0x8e0000":12,"0x8e0004":12,"0x9":12,"0xa":12,"0xac":12,"0xal":12,"0xc":8,"0xc0000005l":12,"0xcf0002":12,"0xcf0003":12,"0xcf0004":12,"0xcf0005":12,"0xd":12,"0xd60000":12,"0xe24a88fa78":12,"0xe24a88fa78l":12,"0xe24a88fa88":12,"0xe24a88fa88l":12,"0xe24aaf9000l":12,"0xf001fl":18,"0xf003fl":18,"0xff":12,"0xfffffffe":8,"0xffffffff":[5,8,18],"0xfffffffffffffffe":8,"0xffffffffffffffff":8,"0xffffffffl":[10,18],"11d1":12,"129l":12,"13l":8,"17415_none_dad8722c5bcc2d8f":12,"1970169159l":8,"2001566688l":12,"2001570704l":12,"2001635616l":12,"2001647872l":12,"31bf3856ad364e35":12,"32b":[2,12],"32bit":[3,7,8,10],"36864l":1,"38ee":12,"3nblhjn":12,"41ac":12,"4aaptee6itt1kldio":12,"58l":8,"5ufw98n5sqgh":12,"64b":12,"64bit":[2,3,7,8,10],"6ae1":12,"7gwyr41uftkcl66ewhxlaowjmkkg6w2bp9byyqok10idedgace9vjr6m4jdh":12,"7jybzf4spmg4acoft85ao5u6tk5atpb7ypuulaivp8908dwtgqn":12,"817a":12,"85e5":12,"\u03bb":12,"abstract":7,"break":[2,7],"byte":10,"case":[1,7,12],"char":10,"class":[1,2,3,4,5,7,8,9,10,11,12,13,14,15,16,17,19,21],"const":12,"default":[1,2,12,17,18],"export":[7,8,10,12,17],"final":[0,7],"function":[0,2,3,5,6,7,10,12],"import":[1,5,8,10,12,18],"int":[1,2,3,4,8,9,10,12,16,17,19],"long":[9,16,17],"new":[1,3,10,14],"public":[2,12],"return":[0,1,2,3,5,7,8,10,11,12,14,18,19,21],"short":10,"super":12,"switch":7,"true":[9,10,12,14,18,19],"try":[1,5,11,12],"while":[5,10,12],For:[3,7],Its:8,NOT:[1,2,7,8,12,18],Not:[12,18],One:7,THE:10,That:12,The:[0,1,2,3,4,5,6,7,8,9,10,11,12,13,18,19],Then:[0,7],There:[0,2,5,12],These:8,Use:12,Useful:[2,14],Using:[5,6,8],With:[5,7],_______noumex______:14,__call__:11,__dict__:12,__file__:12,__getitem__:11,__init__:[2,7,12],__repr__:10,__setitem__:11,__unusedalign:3,_cprototyp:[12,18],_enum_service_status_processa:13,_tcp_table_class:18,_winreg:12,a1udhwrnmeswsabhoewgq2h0dha6ly93d3cubwljcm9zb2z0lmnvbs9wa2lvchmv:12,aa376039:1,aa377163:12,aa379918:12,aa388136:1,abil:0,abl:[1,2,7,10,12],about:[5,7,10,12,18,19],abspath:12,accept:[2,7,8,11],acceptconnect:18,access:[2,8,10,12,15,17],acpi:12,acquir:4,action:[9,12],activ:9,actual:10,adcbhdelmakga1uebhmcvvmxezarbgnvbagtcldhc2hpbmd0b24xedaobgnvbact:12,add:[0,1,2,12,18],add_argu:12,add_bp:[2,12],add_certif:[1,12],add_pars:12,add_subpars:12,additionalinfo:[12,19],addr:[2,10,12,14],address:[2,3,7,8,9,10,12],addvectoredcontinuehandl:18,addvectoredexceptionhandl:[2,3,12,18],adjusttokenprivileg:18,admin:[10,14],adv_import:12,advapi32:12,affect:2,after:2,again:5,aim:17,algid:18,algo:1,algorithm:[1,12],alia:[8,11,13,19],align:3,all:[0,1,2,3,7,8,12,18],all_calc:[],all_notepad:12,alloc:[7,10,12],allocated_memori:10,allocations:18,allocconsol:18,allow:[3,5,8,19],alpcgetmessageattribut:18,alpcinitializemessageattribut:18,alreadi:[7,10],also:[3,5,7,8,12,17,18],alwai:5,amd64:12,analys:12,analysi:12,ani:[1,2,7,8,13,19],anoth:[7,8,12,18],api:[0,2,5,6,7,8,10,12],api_nam:5,apinam:2,append:[8,12],appev:12,appinfo:12,appli:9,applic:[9,12],application_nam:9,appxbackupcontenttyp:12,arg1:8,arg2:8,arg:[2,10,12,14,18],arg_po:12,argpars:12,argument:[2,7,8,12,18],argument_posit:12,argumentpars:12,argv:[],around:[2,7,14,18,19],arrai:7,arround:[1,14],asauthsvc:18,ascii:[8,10,12,13],ask:[7,12],aspx:[1,2,12,14],assembl:[6,12],associ:9,at_keyexchang:[1,12],at_signatur:12,attach:2,attr:21,attribut:[0,10],attributeflag:18,authenticamd:8,author:12,autohandl:10,automaticali:10,avail:[1,18],axmltwljcm9zb2z0ifdpbmrvd3mguhjvzhvjdglvbibqq0egmjaxmtaefw0xnjew:12,b1jlzg1vbmqxhjacbgnvbaotfu1py3jvc29mdcbdb3jwb3jhdglvbjeumcwga1u:12,ba40727d7d257b00f89fc6ca7296c9833b7b75b2:0,backward:8,badpass:12,baiwadanbgkqhkig9w0baqsfaaocaqeavyc1iawgkoxxaotqxan0lj1j5vx01:12,base64:12,base:[2,8,10,12,13,18],base_addr:7,baseaddr:[10,12],baseaddress:18,basic:12,bbbb:12,bbyefbecivg:12,becaus:[7,12],been:[10,18],befor:10,begin:[8,12],behaviour:2,behind:5,being:[7,10],benableprivileg:14,bewar:14,bgkqhkig9w0baqefaaocaq8amiibcgkcaqeaywcacyghnink3ecpyu2uz7lcv9q:12,binherithandl:18,bit:[2,3,7,8,10,12,17],blablabla:[],blob:0,block:10,bool:[10,19],border:18,both:[5,7],break_on_ret:[2,12],breakpoint:[6,12],buffer:[1,7,10,12,18],bufferlength:18,buffers:18,byref:18,bytearrai:[1,12],c_char_p:7,c_uint:12,c_ulong:5,c_void_p:[5,7,12],calc:[12,14],calcul:7,call:[0,2,5,7,8,12,18],callabl:[2,3,5],callback:[2,10],callind:2,can:[0,2,3,5,8,10,12,18,19],cannot:12,capit:12,caption:12,care:7,carr:7,cast:12,cat:12,catalog:[12,19],catalogsign:[12,19],catroot:12,caus:[2,12],cauthsvc:18,cbbufsiz:18,cbcertencod:18,cbdata:12,cbencod:18,cbencryptedblob:18,cbhash:18,cbtobeencrypt:18,ccccbbbb:12,ccert:12,cchbuffer:18,cchbufferlength:18,cchfilenamemax:18,cchname:18,cchnamestr:18,cchreferenceddomainnam:18,cer:12,cert:[1,12,18,19],cert_name_simple_display_typ:1,cert_or_certlist:1,cert_query_content_flag_al:1,cert_query_content_pkcs7_signed_emb:12,cert_stor:[1,12],cert_to_verif:12,certaddcertificatecontexttostor:18,certcomparecertif:18,certcreatecertificatecontext:18,certcreateselfsigncertif:18,certduplicatecertificatecontext:[1,18],certenumcertificatecontextproperti:18,certenumcertificatesinstor:18,certfil:12,certfindcertificateinstor:18,certgetcertificatechain:18,certgetcertificatecontextproperti:18,certgetnamestringa:[1,18],certgetnamestringw:18,certif:6,certif_nam:12,certifact:12,certificatcontext:12,certificatecontext:12,certlist:12,certopenstor:18,certstrtonamea:18,certstrtonamew:18,certverifycertificatechainpolici:12,chain:[1,12],chang:[1,2,8,10],check:[6,12,14],check_debug:14,check_is_elev:[12,14],check_signatur:[12,19],choos:[3,12],chr:12,cimv2:[17,21],classmethod:[1,2,3],clientportobjectattribut:18,close:[9,10,12],closehandl:18,clsctx_inproc_serv:18,clsid:12,cmapi:12,cmd:12,cmp:8,cmsg_signer_info:1,cocreateinst:18,code3:0,code4:0,code:[0,2,3,6,7,10,17,20],code_addr:12,code_s:12,codetesteur:12,coinit_multithread:18,coinitializeex:18,coinitializesecur:18,com:[1,2,6,14,17],com_inetfwpolicy2:12,combinaison:8,comctl32:12,comimplement:0,cominterfac:0,command:[12,18],commandlin:[10,12],common:12,common_nam:12,commonnam:12,compar:18,complet:12,complex:8,compon:6,compressedbuff:18,compressedbuffers:18,compressionformat:18,comput:[17,18],computedfamili:8,computedmodel:8,computer_nam:[12,17],computernam:10,condit:8,condrv:12,conn:12,connect:[12,15],connectionmessag:18,connectionmessageattribut:18,connectionporthandl:18,connectionportobjectattribut:18,connectionrequest:18,consol:[12,14],contain:[1,8,12],contan:1,content:[1,6,10,12],content_typ:[1,12],context:[1,2,6,8,10,12,15,18],context_exec:12,context_syswow:10,contextflag:3,contextmanag:10,contextrecord:[3,12],contextu:14,continuedebugev:18,control:12,control_accept:[12,13],conveni:14,convertsidtostringsida:18,convertsidtostringsidw:18,convertstringsidtosida:18,convertstringsidtosidw:18,copi:[4,7],corporation1:12,correct:[7,12],correspond:2,counter:[3,12],cp_handl:12,cproc:2,cprovparam:12,cpuid:6,creat:[0,1,2,3,7,8,10,12,14],create_connect:12,create_consol:[12,14],create_displac:8,create_file_from_handl:14,create_funct:[8,12],create_inst:[0,12],create_process:[2,12,14],create_suspend:12,create_thread:[2,10,12],createdisposit:18,createfile_callback:5,createfilea:[5,12,18],createfileacallback:5,createfilemappinga:18,createfilemappingw:18,createfilew:18,createopt:18,createprocessa:[14,18],createprocessw:18,createremotethread:[7,18],createsuspend:18,createthread:18,createtoolhelp32snapshot:18,creation:10,crecipientcert:18,cross:6,crypt:12,crypt_algo:12,crypt_algorithm_identifi:12,crypt_deletekeyset:12,crypt_export:[1,12],crypt_key_prov_info:12,crypt_user_keyset:1,cryptacquirecertificateprivatekei:18,cryptacquirecontexta:18,cryptacquirecontextw:[1,12,18],cryptcatadminacquirecontext:18,cryptcatadmincalchashfromfilehandl:18,cryptcatadminenumcatalogfromhash:18,cryptcatadminreleasecatalogcontext:18,cryptcatadminreleasecontext:18,cryptcatcataloginfofromcontext:18,cryptcontext:12,cryptdecodeobject:18,cryptdecryptmessag:18,cryptdestroykei:[12,18],cryptencodeobjectex:18,cryptencryptmessag:18,cryptexportkei:18,cryptgenkei:[12,18],cryptmsggetparam:18,crypto:6,cryptoapi:[6,12],cryptobj:12,cryptobject:12,cryptpars:12,cryptqueryobject:18,cryptreleasecontext:[1,18],cs_32bit:7,cs_64bit:7,cthread:2,ctx:12,ctype:[1,5,7,8,10,12,14,18],ctypes_funct:[12,18],ctypes_gener:0,curent:10,current:[1,2,3,8,9,10,17,18],current_process:[2,5,7,10,17],current_profile_typ:9,current_thread:[2,12,17],current_us:12,currentprocess:[12,15,17],currentthread:[15,17],currentvers:12,cuwqtwgls2gd5a:12,dai:7,dat:12,data:[1,2,8,10,12,13],dbg:[2,12],dbg_continu:2,dbg_exception_not_handl:2,dbginterfac:0,dead:[2,10],deadlock:10,deadthread:10,debug:[6,14,15,17],debug_exeception_ev:2,debug_functionbp:12,debug_process:12,debug_str:2,debugactiveprocess:18,debugactiveprocessstop:18,debugbreak:18,debugbreakprocess:18,debugcontrol:3,debugg:6,debugger_membp_singlestep:12,debugger_print_ldrloaddl:12,debugingg:2,debugsetprocesskillonexit:18,decod:12,decor:[3,5],decrypt:12,decryptpars:12,def:[5,7,12,14],defin:3,definit:0,defint:0,del_bp:2,delet:2,demo:[1,8],depend:[8,10,12],deref:[8,12],describ:[8,15],descript:[8,9,12,13],descriptor:10,descrption:12,desiredaccess:18,desktop:[1,2,12],dest:12,destin:10,destroi:[10,12],detach:2,devic:[12,16],deviceapi:12,deviceiocontrol:18,dict:[9,10,12,21],didn:7,die:10,diff:12,differ:19,direct:9,directli:[0,1,7],directoryhandl:18,disabl:[2,5,14],disable_all_memory_breakpoint:2,disableallprivileg:18,disabledmemorybreakpoint:2,disassembl:2,disk:1,disp:8,dispatch:2,displac:8,displai:14,dll:[2,5,8,10,12,18,19],dll_load:12,dll_path:10,do_cpuid:8,doc:4,document:[2,12,18],doe:[7,8,12,18],don:[2,12,17],done:[5,7,10,12],dr0:3,dr1:3,dr2:3,dr3:3,dr6:3,dr7:3,drive:[6,12,15,17],drive_cdrom:16,drive_fix:[12,16],drive_no_root_dir:16,drive_ramdisk:16,drive_remot:16,drive_remov:16,drive_unknown:16,driver:12,drx:2,dst:12,dummyunionnam:3,dump:[3,12],duplic:1,duplicatehandl:[4,18],dwadddisposit:18,dwauthnlevel:18,dwblobtyp:18,dwcapabl:18,dwcertencodingtyp:18,dwclscontext:18,dwcoinit:18,dwcontinuestatu:18,dwcreationdisposit:[5,18],dwcreationflag:[2,10,12,14,18],dwdesiredaccess:[5,18],dwexitcod:18,dwexpectedcontenttypeflag:18,dwexpectedformattypeflag:18,dwfileoffsethigh:18,dwfileoffsetlow:18,dwfindflag:18,dwfindtyp:18,dwfirstchanc:3,dwflag:[1,12,18],dwflagsandattribut:[5,18],dwfreetyp:18,dwhandl:18,dwimplevel:18,dwindex:18,dwiocontrolcod:18,dwkeyspec:12,dwlen:18,dwlength:18,dwmaximumsizehigh:18,dwmaximumsizelow:18,dwmillisecond:18,dwmsgandcertencodingtyp:18,dwnumberofbytestomap:18,dwobjecttyp:18,dwoption:18,dword:[7,10],dwoutbuflen:18,dwparamtyp:18,dwprocessid:[12,18],dwpropid:18,dwprovtyp:[1,12,18],dwservicest:18,dwservicetyp:18,dwsharemod:[5,18],dwsize:18,dwstacksiz:18,dwstrtype:18,dwthreadaffinitymask:18,dwthreadid:18,dwtype:18,dynam:7,e24a88fa88:12,e2b3c97f:12,eabuff:18,each:[1,8],ealength:18,earli:6,easi:12,eax:[3,8,12],ebp:[3,12],ebx:[3,8,12],echo:12,econtext32:[3,10],econtext64:[3,10],econtextwow64:[3,10],ecrypt_data_blob:12,ecx:[3,8,12],edi:[3,8,12],edit:17,edr7:3,edx:[3,8,12],eeflag:[3,12],eexception_debug_info32:[2,3],eexception_debug_info64:[2,3],eexception_point:3,eexception_record32:3,eexception_record64:3,eexception_record:3,eflag:[3,12],ehcertstor:12,eip:[3,12],element:1,elev:[9,12],elif:[],els:[2,9,12,19],emb:[5,19],embd:[1,12],embed:2,enabl:[5,9,10,12,14],enable_privileg:14,encod:[1,12],encount:7,encrypt:6,encryption_demo:12,end:[8,10,12],endswith:12,engizuyhxgvqzrdrhu4g4:12,enhanc:3,enough:18,entri:[5,10,12],enumer:12,enumservicesstatusexa:18,enumservicesstatusexw:18,enumwindow:18,environ:[10,12],equal:[9,18],errcheck:18,errno:12,error:[12,18,19],esec:0,esi:[3,8,12],esp:[3,8,12],establish:[9,12],eudc:12,even:17,event:[2,12],eventhandl:18,everi:[7,8,12],ewpxyxnoaw5ndg9umrawdgydvqqhewdszwrtb25kmr4whaydvqqkexvnawnyb3nv:12,ewrnt1bsmtqwmgydvqqfeysymjk4nzkrmtq3ndq5ymutmtvhoc00zwjhltkzzjmt:12,exampl:[5,6,7,8],exc:[2,12],exc_addr:12,exc_cod:12,except:[2,6,10,12,15,18],exception_access_viol:12,exception_breakpoint:12,exception_continue_execut:12,exception_single_step:12,exceptionaddress:[3,12],exceptioncod:[2,3,12],exceptionflag:3,exceptioninform:[3,12],exceptionrecord:[3,12],exe:[12,14],exec:[2,12],execut:[2,6,7,10,12,17],execute_64bits_code_from_syswow:7,execute_python:[10,12],execute_python_unsaf:10,exempl:18,exist:[7,12],exit:[2,5,10,12,14],exit_callback:5,exit_cod:[10,12],exit_process:2,exit_thread:2,exitprocess:18,exitthread:18,exp:12,expect:[0,2],expir:19,explan:19,explor:[6,9,15],export_directori:10,export_nam:10,expr:8,extendedregist:3,extract:[1,2,7,8,12],extract_argu:[2,12],f6f92166d7dd:12,f750e6c3:12,fail:[8,9,12,18],fake_modul:12,fals:[1,2,9,12,18],famili:8,far:7,fat32:12,fault:2,fault_addr:12,featur:[8,20],ff556253:14,fhandl:12,field:[3,7,8,10,11,13,19],file:[0,1,12,14,18,19],file_attribute_norm:18,file_h:12,file_map_all_access:18,fileattribut:18,filehandl:[12,18],filenam:[1,10,12,19],filesystem:[12,14],filetyp:12,finaluncompresseds:18,find:12,firewal:[0,12,15],firewallrul:9,first:[5,12,18],firsthandl:18,fixedinteractiveconsol:12,flag:[1,3,12,13,18],flallocationtyp:18,flnewprotect:18,floatsav:3,flprotect:18,follow:[2,7,12],font:12,force_bit:10,forcibl:12,form:2,format:[5,8,12,17,18],forward:8,found:[8,12],free:10,freeconsol:18,freespac:12,frm:21,from:[0,1,2,5,7,8,10,12,21],from_address:12,from_buff:[1,12],from_fil:[1,12],from_str:12,from_system_stor:[1,12],ftype:7,full:10,full_signature_inform:[12,19],fullnam:[10,12],func:12,func_getprocaddress32:8,func_getprocaddress64:8,func_nam:[12,18],func_result:[3,12],func_strlena32:8,func_strlena64:8,func_strlenw32:8,func_strlenw64:8,functionbp:2,gate:6,gdef:12,gdi32:12,gdiplu:12,gdiplus_6595b64144ccf1df_1:12,gencrypt:12,gener:[0,5,6,7,8,12],generate_pfx:12,generate_selfsigned_certif:12,generate_syswow64_cal:7,generated_def:[0,10,12,13,18],generateinitvector:1,generic_read:18,geninitvector:1,genkei:[1,12],genkeyspars:12,genuineintel:8,get:[0,2,10,11,12,14],get_cert:[1,12],get_cod:[8,12],get_exception_bit:2,get_exception_cod:[2,12],get_exception_context:[2,12],get_firewallen:12,get_handle_from_fil:14,get_mapped_filenam:10,get_memory_breakpoint_at:2,get_nam:1,get_optionalhead:12,get_proc_family_model:8,get_signer_certif:[1,12],get_signer_data:[1,12],get_vendor_id:8,getattr:12,getcomputernamea:18,getcomputernamew:18,getcurrentprocess:18,getcurrentprocessornumb:18,getcurrentthread:18,getcurrentthreadid:18,getcursorpo:18,getdrivetypea:18,getdrivetypew:18,getexitcodeprocess:18,getexitcodethread:18,getextendedtcpt:18,getfileversioninfoa:18,getfileversioninfosizea:18,getfileversioninfosizew:18,getfileversioninfow:18,getift:18,getinterfaceinfo:18,getipaddrt:18,getlasterror:18,getlogicaldrivestringsa:18,getlogicaldrivestringsw:18,getlongpathnamea:18,getmappedfilenameawrapp:18,getmappedfilenamewwrapp:18,getmodulebasenameawrapp:18,getmodulebasenamewwrapp:18,getnamedsecurityinfoa:18,getnamedsecurityinfow:18,getpeernam:12,getpefil:10,getprocaddress32:8,getprocaddress64:8,getprocaddress:18,getprocessdeppolici:18,getprocessid:18,getprocessimagefilenameawrapp:18,getprocessimagefilenamewwrapp:18,getprocesstim:18,getsecurityinfo:18,getshortpathnamea:18,getsidsubauthor:18,getsidsubauthoritycount:18,getstdhandl:18,getsystemmetr:18,getthreadcontext:18,getthreadid:18,gettokeninform:18,getversionexa:18,getversionexw:18,getvolumeinformationa:18,getvolumeinformationw:18,getvolumenameforvolumemountpointa:18,getvolumenameforvolumemountpointw:18,getwindowmodulefilenamea:18,getwindowmodulefilenamew:18,getwindowrect:18,getwindowtexta:18,getwindowtextw:18,ggegtt4pwpqg8ch0jnrkl1fb3kzz7e34:12,github:0,give:5,given:[2,12,18],goal:[1,7,12],got:12,group:[9,15],guess:11,gui:14,h1cki4tgezqzceunpnwv6dmuvpciqgeia5phojzyenknd0sx6eqzrynuz1gmn:12,hack:[3,7],had:1,hadditionalstor:18,hakril:12,hand:8,handl:[2,6,7,8,10,12,14,15,17,18],handle_addr:12,handle_valu:12,handler:[3,12,18],handlerroutin:18,hanld:17,harddisk0:12,harddiskvolume2:12,hardwar:[2,14],hardware_exec_bp:2,has:[2,12,18],hasattr:12,hashalgorithm:12,hashlib:12,have:[0,2,3,5,7,10,12,18,19],haven:1,hcatadmin:18,hcatinfo:18,hcertstor:18,hchainengin:18,hcryptkei:[1,12],hcryptmsg:18,hcryptprov:[12,18],hcryptprovorncryptkei:18,hdevic:18,heaven:6,heavili:18,hello:12,help:[12,17,18],helper:6,here:[7,12,18,20],hex:12,hexdigest:12,hexdump:12,hexpkei:18,hfile:18,hfilemappingobject:18,hhandl:18,hidden:7,hit:2,hkei:[12,18],hkey_current_us:12,hkey_local_machin:12,hmem:18,hmht7km6g8lsmfiga1udeqrlmemkrzbfmq0wcwydvqql:12,hmodul:18,hobject:18,hold:12,hook:[6,10],horribl:[3,7],host:12,hostnam:9,hprocess:18,hprov:18,hscmanag:18,hsnapshot:18,hsourcehandl:18,hsourceprocesshandl:18,hstore:[1,18],htargetprocesshandl:18,htemplatefil:[5,18],hthread:18,http:[0,1,2,12,14],hwnd:18,hxbp:12,hxbreakpoint:[2,12],iat:[6,10],iat_create_fil:5,iat_entri:5,iat_hook:12,iatentri:[5,12,14,15],iathook:[5,10],ident:12,identif:9,iid:12,imagepath:[10,12],imagepathnam:10,imm32:12,immedi:8,imp:5,implement:[2,6],import_pfx:12,importerror:12,in073czyitg7mvhbexbofhgncixoufeyhwy1pygjousqsqzs4bj:12,inc:12,includ:8,increment:1,index:[1,6,8],indic:8,inetfwpolicy2:[0,6],infinit:[10,12,18],infitin:12,info:[4,12,15],infolevel:18,inform:[1,7,10,12,19],inherit:7,init:12,init_breakpoint:12,initi:1,initial_cod:12,initialis:12,initvector:1,inject:[12,14],inmessageattribut:18,input_buffer_port:8,input_buffer_s:8,input_buffer_valu:8,instal:17,installd:12,instanc:[0,12],instr:[8,12],instruct:[8,12],int3:2,integr:10,interact:12,interativeconsol:14,interest:2,interfac:[2,6,9,12,17],interface_typ:9,intern:[1,6],invalid:19,io_stack_input_buff:8,io_stack_input_buffer_len:8,iopl_1:3,iopl_2:3,iostatusblock:18,iphlpapierror:18,ipv4:[9,12],ipv6:9,is_amd_proc:8,is_elev:10,is_exit:10,is_intel_proc:8,is_process_32_bit:14,is_sign:[12,19],is_workst:17,is_wow_64:[10,12],issuer:[1,12],item:[11,12],its:[0,2,10],itself:19,jmp:[8,12],jnz:8,join:12,ju6ih:12,jump:[7,8],just:[5,7,8],k32:12,k32pe:12,k9dctgaoymff6qukabqidaqab:12,keep:[5,7,10],kei:[1,10,11,12],kernel32:[5,12],kernel32_error_check:[12,18],kernel32error:[1,12,18],kernel:[10,14],kernelbas:12,key_info:[1,12],key_read:11,keyboard:12,keypair:1,keyprovinfo:12,keytyp:1,keyvalu:[12,15],keyword:18,khiu4to5jf25xthf2g:12,kill:12,killonexit:18,knockin:7,know:[2,7,17,18,19],known:[2,5],kwarg:12,kwd:[2,10],l2ec6cyjdqc6hcqbncsbjvq6qgtqbyn:12,l2nlcnrzl01py1dpblbyb1bdqtiwmtffmjaxms0xmc0xos5jcnqwdaydvr0taqh:12,l56:0,lab:0,label:[8,12],lait:12,last:[5,12,18],lastbranchfromrip:3,lastbranchtorip:3,lastexceptionfromrip:3,lastexceptiontorip:3,layout:12,ldr:12,ldrloaddll:[12,18],ldrloaddll_32_to_64:7,left:1,len0:3,len1:3,len2:3,len3:3,len:[12,18],length:[10,18],let:12,level:10,librari:[1,2,10,12,14],like:[7,14],line:[12,18],linebuf:12,linkhandl:18,linktarget:18,list:[1,3,5,8,9,10,11,12,17,21],listen:[9,12],lkd:0,load:[2,6,12,15,18],load_dll:2,load_librari:10,loadedmodul:[12,15],loadlibrari:8,loadlibrarya:18,loadlibraryw:18,local:[4,9,10],local_addr:9,local_address:9,local_debugg:12,local_debugger_remote_process:12,local_handl:4,local_port:[9,12],localdebugg:6,localfre:18,localhost:12,logic:[6,12,15,17],logicaldr:[12,16,17],look:[5,12],lookupaccountsida:18,lookupaccountsidw:18,lookupprivilegevaluea:18,lookupprivilegevaluew:18,loop:[2,12],lower:12,lpaddress:18,lpapplicationnam:18,lparam:18,lpbaseaddress:18,lpbasenam:18,lpbuffer:18,lpbytesreturn:18,lpcbdata:18,lpcommandlin:18,lpcontext:18,lpcreationtim:18,lpcurrentdirectori:18,lpdata:18,lpdatabasenam:18,lpdebugev:18,lpdevicenam:18,lpdirectori:18,lpdwhandl:18,lpenumfunc:18,lpenviron:18,lpexitcod:18,lpexittim:18,lpfile:18,lpfilemappingattribut:18,lpfilenam:[5,18],lpfilesystemflag:18,lpfilesystemnamebuff:18,lpflag:18,lpfloldprotect:18,lpimagefilenam:18,lpinbuff:18,lpkerneltim:18,lplpbuffer:18,lpluid:18,lpmachinenam:18,lpmaximumcomponentlength:18,lpname:18,lpnsize:18,lpnumberofbytesread:18,lpnumberofbyteswritten:18,lpoper:18,lpoutbuff:18,lpoverlap:18,lpparamet:[10,18],lpperman:18,lppoint:18,lpprocessattribut:18,lpprocessinform:18,lpprocnam:18,lprect:18,lpreferenceddomainnam:18,lpreserv:18,lpresumehandl:18,lprootpathnam:18,lpsecurityattribut:[5,18],lpservic:18,lpservicesreturn:18,lpsid:18,lpstartaddress:[10,18],lpstartupinfo:18,lpstring1:18,lpstring2:18,lpstring:18,lpsubblock:18,lpsubkei:[12,18],lpsystemnam:18,lpszlongpath:18,lpszprivileg:14,lpszshortpath:18,lpszstoreprovid:18,lpszstructtyp:18,lpszvolumemountpoint:18,lpszvolumenam:18,lptargethandl:18,lptargetpath:18,lpte:18,lpthreadattribut:18,lpthreadid:18,lptstrfilenam:18,lptype:18,lpusertim:18,lpv:18,lpvalu:18,lpvaluenam:18,lpversioninform:18,lpvolumenamebuff:18,lpvolumeserialnumb:18,lsa_unicode_str:10,lstrcmpa:18,lstrcmpw:18,machin:8,made:7,magic:[5,7,12],mai:[7,8],main:1,major:17,make:[2,5,6,15],manag:[1,2,6,10],mandatori:18,mani:15,manual:12,manuali:5,map:[2,10,11],mape:9,mapviewoffil:18,mask:9,match:12,maximumlength:10,mayb:12,mean:[2,7,10,18],mem:[8,12],mem_access:8,mem_commit:18,mem_releas:18,membp:2,memori:[1,2,7,8,10,12],memory_basic_inform:10,memory_breakpoint:2,memory_st:10,memorybreakpoint:[2,12],memoryinform:18,memoryinformationclass:18,memoryinformationlength:18,messag:[1,12],metavar:12,method:[0,1,2,7,12],microsoft:[1,2,12,14],might:[2,3,7,9,13,17,20],miifbdcca:12,minor:17,mismatch:8,miss:18,mnemon:8,mode:[7,8,14],model:[6,8],modul:[0,1,3,5,6,7,8,10,12,18,19],module_to_trac:12,modulefilenam:18,modulehandl:18,more:[10,12,19],most:[3,12,18],mov:[8,12],ms679286:2,ms679287:2,ms679334:2,ms679335:2,ms680351:2,ms680545:2,ms680587:2,ms681403:2,msctf:12,msdn:[1,2,12,14],msg:1,msvcr90:12,msxml6:12,mteymdm5mzfafw0xodaxmteymdm5mzfamhaxczajbgnvbaytalvtmrmweqydvqqi:12,much:2,mui:12,multipleinstr:[8,12],must:[2,5,7,10,12,18],mxcsr:3,my_ex:5,my_fail_kei:12,my_secret_kei:12,mydebugg:12,myfunctionbp:12,myinterfac:0,mykei:12,mypassword:12,name:[1,3,4,5,7,8,9,10,11,12,13,16,17],name_valu:12,nametyp:1,narg:12,nativ:[0,6,10,17],native_cod:12,native_exec:[6,7,12,17],nativeutil:6,nb_cert:[1,12],nb_repeat:12,nb_signer:[1,12],nbufferlength:18,need:[0,5,7,12,18],neededparamat:18,neededparamet:18,neg:12,net_fw_action_:9,net_fw_action_allow:9,net_fw_action_block:9,net_fw_profile2_domain:[9,12],net_fw_profile2_priv:[9,12],net_fw_profile2_publ:[9,12],net_fw_profile_type2_:9,net_fw_rule_dir_in:9,net_fw_rule_dir_out:9,net_fw_rule_direction_:9,netfwpolicy2clsid:12,network:[0,6,15,17],new_align:3,new_in_memori:[1,12],new_protect:14,newaccessprotect:18,newli:12,newstat:18,nfilesystemnames:18,nfunc:12,nice:10,ninbuffers:18,nindex:18,nmaxcount:18,nnumberofbytestoread:18,nnumberofbytestowrit:18,non:[2,8,12],none:[1,2,3,5,8,10,11,12,13,14,18,21],nop:12,normal:[3,12],note:1,notepad:12,noth:[18,20],noumex:14,noutbuffers:18,now:[1,2,7,11,12,20],now_valu:12,nshowcmd:18,nsize:18,nstdhandl:18,nsubauthor:18,ntalpcacceptconnectport:18,ntalpcconnectport:18,ntalpcconnectportex:18,ntalpccreateport:18,ntalpcsendwaitreceiveport:18,ntcreatefil:[12,18],ntcreatefile_iat:12,ntcreatethreadex:18,ntcreatethreadex_32_to_64:7,ntdll:[7,12],ntf:12,ntgetcontextthread:18,ntgetcontextthread_32_to_64:7,ntopendirectoryobject:18,ntopenev:18,ntopensymboliclinkobject:18,ntprotectvirtualmemori:18,ntquerydirectoryobject:18,ntqueryinformationprocess:18,ntqueryinformationprocess_32_to_64:7,ntqueryinformationthread:18,ntqueryinformationthread_32_to_64:7,ntqueryobject:18,ntquerysymboliclinkobject:18,ntquerysysteminform:18,ntqueryvirtualmemori:18,ntqueryvirtualmemory_32_to_64:7,ntsetcontextthread:18,ntsetcontextthread_32_to_64:7,ntwow64readvirtualmemory64:18,ntwow64writevirtualmemory64:18,number:[1,5,7,8,11,13,19],numberofbytestoprotect:18,numberparamet:3,nvolumenames:18,nwashington1:12,nyolocertif:12,o4ibgdccaxwwhwydvr0lbbgwfgykkwybbagcnwodbgyikwybbquhawmwhqydvr0o:12,object:[1,6,7,8,10,12,13,21],objectattribut:[12,18],objectinform:18,objectinformationclass:18,objectinformationlength:18,objectnam:12,objecttyp:18,occur:2,offer:[1,17,19],offset:[2,7,12],old:[10,14],old_protect:10,oldaccessprotect:18,oldvalu:18,ole32:12,oleacc:12,oleaut32:12,on_create_process:2,on_create_thread:2,on_except:[2,12],on_exit_process:2,on_exit_thread:2,on_load_dl:2,on_output_debug_str:2,on_rip:2,on_single_step:[2,12],on_unload_dl:2,onc:7,one:[1,2,7,10,12,13],ones:3,onli:[0,2,7,8,10,11,12],open:[5,11,12],open_exist:18,open_reg_hook:12,open_subkei:11,openasself:18,openeventa:18,openeventw:18,openkei:12,openprocess:18,openprocesstoken:18,openscmanagera:18,openscmanagerw:18,openthread:18,openthreadtoken:18,oper:[7,8,14],operand:8,ord:[10,12],order:[5,8],ordereddict:2,ordin:[10,12,18],origin:2,originali:5,osnam:12,other:[2,5,7],ouput:12,our:[7,12],our_connect:12,ourself:12,out:[1,8],out_2_or_4:8,out_4:8,out_ioctl:8,outmessageattribut:18,outnam:12,output:12,own:10,owner:[10,12],p1home:3,p2home:3,p3home:3,p4home:3,p5home:3,p6home:3,package_35_for_kb3128650:12,page:[2,6,10,12],page_execute_readwrit:[10,12,14,18],page_noaccess:12,page_readwrit:[12,18],pain:7,pair:12,panel:12,param:[2,10,12],param_nam:18,paramet:[2,5,7,8,10,18],parent:10,pars:[6,7,8,15],parse_arg:12,parser:12,part:[7,15,19],partition2:12,pass:[0,2,3,5,7,18],password:[1,12,21],path:[2,10,12,14,16],pathnam:12,pathtofil:18,pauthlist:18,pbcertencod:18,pbdata:[12,18],pbdecrypt:18,pbencod:18,pbencryptedblob:18,pbhash:18,pblock:18,pbtobeencrypt:18,pca:12,pcbbytesneed:18,pcbdata:18,pcbdecrypt:18,pcbencod:18,pcbencryptedblob:18,pcbhash:18,pcbstructinfo:18,pccert_context:1,pcert:18,pcertcontext:18,pcertid1:18,pcertid2:18,pchainpara:18,pdecryptpara:18,pdwcontenttyp:18,pdwdatalen:18,pdwformattyp:18,pdwkeyspec:18,pdwmsgandcertencodingtyp:18,pdwsize:18,pdwtype:18,pe_pars:[5,12,15],peb:[5,6,7,15],peb_addr:[7,10],peb_syswow:10,pefil:[6,12,15],pencodepara:18,pencryptpara:18,pendtim:18,perform:[2,5,7,8,17,21],perform_cal:[12,18],pesect:12,peus:18,pextens:18,pfcallerfreeprovorncryptkei:18,pfw_tmp_key_contain:12,pfx:[1,12],pfxexportcertstoreex:18,pfxfile:12,pfximportcertstor:[12,18],pfxpassword:12,pgactionid:18,pgsubsystem:18,phcatadmin:18,phcertstor:18,phcryptprovorncryptkei:18,phkei:18,phkresult:[12,18],phmsg:18,phprevcatinfo:18,phprov:18,pid:[10,12],piftabl:18,pipaddrt:18,pkcs12_no_persist_kei:1,pkeyprovinfo:18,place:19,plai:[3,12],plu:5,pobjectnam:18,poc:12,point:[1,18],pointer:[1,7,15],pop:[8,14],pop_calc_32:12,pop_calc_64:[12,14],pop_shel:14,port:[8,9,12],portattribut:18,portcontext:18,porthandl:18,portnam:18,possess:4,possibl:[0,7,17],post:12,pouet:[],ppchaincontext:18,ppdacl:18,ppfx:[12,18],ppid:[10,12],pprevcertcontext:18,pprint:12,ppsacl:18,ppsecuritydescriptor:18,ppsidgroup:18,ppsidown:18,ppstorecontext:18,ppszerror:18,ppv:18,ppvcontext:18,ppxchgcert:18,prefix:[3,8],present:[7,10],preserved1:18,preserved3:18,pretti:7,prevent:10,previousst:18,print:[3,5,8,12],printer:12,printunicodestr:12,privat:12,privileg:14,pro:12,problabl:1,problem:7,proc:12,process32first:18,process32next:18,process:[2,6,7,8,9,13,14,15,17,18],process_all_access:18,processhandl:18,processid:12,processinform:18,processinformationclass:18,processinformationlength:18,processor:7,product:[12,17],product_typ:[12,17],profession:17,profil:[9,12],prog:12,program:3,progress:6,project:[0,8],properti:1,prot:10,protect:[1,10,12,14],protocol:[6,9,10],prov:[1,12],prov_rsa_ful:12,provid:[1,8,14,18],proxi:18,pscatinfo:18,psecdesc:18,psid:18,psignaturealgorithm:18,pstarttim:18,psubjectissuerblob:18,pszcontain:[1,18],pszfilenam:18,pszgroupnam:18,psznamestr:18,pszobjid:12,pszprovid:[1,18],pszx500:18,ptcprow:18,ptcptabl:18,ptime:18,ptr:10,pulen:18,punkout:18,purpos:8,push:[8,12],put:[2,6],pvdata:18,pvencod:18,pvfindpara:18,pvobject:18,pvoid:[12,14],pvpara:18,pvparamet:18,pvreserv:18,pvstructinfo:18,pvtypepara:18,pwszcontainernam:12,pwszprovnam:12,pwvtdata:18,pycod:10,pyhkei:[12,15],python27:12,python32:12,python64:12,python:[0,3,7,8,10,12,14,17],python_cod:12,python_execut:12,pythondll_modul:12,pythonforwindow:[0,7,12],pythonforwindowstmpcontain:12,pythont:18,pythonxx:12,qhsszio1k5n1udlpfwtn29buglsrttxpv5ocfntlo:12,queri:10,query_memori:10,querydosdevicea:18,querydosdevicew:18,queryworkingsetexwrapp:18,queryworkingsetwrapp:18,question:12,quit:[5,7],qword:[7,10],r10:[3,12],r11:[3,12],r12:[3,12],r13:[3,8,12],r14:[3,12],r15:[3,12],rais:[1,10,12,18],randint:8,random:[1,8],rang:12,raw64:[],raw:[1,3,8,12],raw_cert:12,raw_seri:[1,12],rax:[3,8,12],rbp:[3,12],rbx:[3,12],rclsid:18,rcx:[3,12],rdata:12,rdi:[3,12],rdx:[3,12],read:[1,2,7,10,11,12],read_byt:10,read_dword:10,read_memori:[7,10,12],read_memory_into:10,read_ptr:[10,12],read_qword:10,read_short:10,read_str:10,read_wstr:[10,12],readfil:18,readprocessmemori:18,real:[1,2,5],real_funct:[5,12],receivemessag:18,receivemessageattribut:18,recent:[12,18],record:15,redirect:[5,14],refcount:1,refer:[5,10],reg:[3,12],reg_nam:3,regclosekei:18,reggetvaluea:18,reggetvaluew:18,regist:[3,7,8,12],register_start:12,registered_own:12,registeredown:12,registri:[6,15,17],regopenkeyexa:[12,18],regopenkeyexa_iat:12,regopenkeyexacallback:12,regopenkeyexw:18,regqueryvalueexa:18,regqueryvalueexw:18,regroup:3,reject:19,relat:[6,15],releas:12,reli:[7,18],reloc:12,remot:[0,2,7,9,10],remote_addr:[9,12],remote_address:9,remote_calc:[],remote_cod:12,remote_host:9,remote_port:[9,12],remote_process:12,remote_proto:9,remote_veh_segv:12,remotectyp:[6,10],remoteloadedmodul:12,remotemanualloadlibrai:8,remotepeb32:7,remotepeb64:7,remotepeb:[7,12],remotepythonerror:12,remotewinunicodestr:12,remov:10,remove_hook:10,removevectoredexceptionhandl:18,replac:[7,12],report_ctx_diff:12,repr:[8,12],repres:[1,2,5,7,8,10,15,17],represent:[1,10,12],req:8,request:[2,6,15,17],requir:[9,12],requiredbuffers:18,requiredserversid:18,res:12,res_15:3,res_1:3,res_3:3,res_5:3,reserv:18,reset:12,resolut:9,resolv:[8,10],respect:[5,12],restartscan:18,restor:[2,10,14],restore_all_memory_breakpoint:2,result:[2,7,8,10,12,18],resultat:3,resum:[10,12],resumethread:18,ret:[7,8,12],ret_trigg:[2,12],ret_valu:12,retriev:[0,1,7,11],retrycr:[1,12],returnedlength:18,returnlength:18,returnsingleentri:18,revers:7,rewrit:[7,12],rewritebreakpoint:12,rewrot:7,rgprecipientcert:18,rgprovparam:12,right:[2,10,20],riid:18,rip:[3,12],rip_info:2,rlxmnhc8jtgzk96czmdbpauuwdachnmtkiwqf6axzsbbwsekqejvdbygaocuiyh4:12,root:[12,17,19,21],root_stor:12,rsa:12,rsi:[3,12],rsp:[3,12],rsrc:12,rtldecompressbuff:18,rtype:10,rule:9,run:[12,13,17],rw0:3,rw1:3,rw2:3,rw3:3,rwx:[2,12],sad:2,safe:12,sai:12,sam:11,samdesir:[12,18],same:[3,5,8],sampl:[0,1,2,3,4,5,6,9,10,11,13,16,17,19,21],save:1,sbgna5cjtxqc7iyp9c7rxbmthv5bnftonsn6d9n8zu:12,sc_manager_all_access:18,scale:8,se_debug_nam:14,search:6,secret:[5,12],section:[12,15],secur:12,securityinfo:18,see:[0,1,2,3,4,5,7,8,9,10,11,12,13,16,17,19,21],seg:8,segc:3,segd:3,sege:3,segf:3,segfault:10,segg:3,segment:7,segss:3,select:[12,21],selector:7,self:[1,7,9,12,18],selfsign:1,send:12,sendmessag:18,sendmessageattribut:18,serial:[1,12],serv:12,server:17,serversecurityrequir:18,servic:[6,9,12,15,17],service_continue_pend:13,service_file_system_driv:13,service_interactive_process:13,service_kernel_driv:[12,13],service_nam:9,service_paus:13,service_pause_pend:13,service_run:[12,13],service_runs_in_system_process:13,service_start_pend:13,service_stop:13,service_stop_pend:13,service_win32_own_process:13,service_win32_share_process:[12,13],servicea:[12,13,17],servicestatu:[12,13],set:[10,11,12,18],set_context:[10,12],set_default:12,set_hook:[5,10,12],set_syswow_context:10,setattr:12,setconsolectrlhandl:18,setstdhandl:18,settcpentri:18,setthreadaffinitymask:18,setthreadcontext:18,settokeninform:18,setup:[2,5,7,10,12,17],setup_target_context:12,sha1:12,sha256:12,shareaccess:18,shell32:12,shellcod:8,shellexecutea:18,shellexecutew:18,should:[0,1,2],show_window:[2,14],sid:18,side:3,sign:[1,12,19],sign_info:12,signatur:[6,12],signature_algo:[1,12],signer:[1,12],signer_certif:[],simpl:[1,5,8,12],simple_x64:[6,7,12],simple_x86:[6,12],simpler:3,simpli:5,singl:2,single_step:[2,12],single_step_count:12,singlesteponwrit:12,singlesteppingdebugg:12,size:[2,7,8,10,12,14],sizeof:14,sizeofcod:12,sleep:12,socket:[6,9],softwar:12,softwaretyp:12,sofwar:12,sogeti:0,some:[1,2,5,7,8,10,12,14,17,18,20],some_export:12,someth:7,soon:2,sourc:[1,2,3,4,5,7,8,9,10,11,13,14,16,17,19,21],space:10,special:[7,18],specifi:12,split:12,src:12,stack:[3,7,12],stackoverflow:12,standard:[2,7,14],standard_bp:2,start:[10,12],start_addr:12,start_address:10,start_regist:12,start_valu:12,startswith:12,startup:12,state:[12,13,17],staticcach:12,statu:[12,13],stdin:18,stdout:14,step:2,still:20,still_act:10,storag:18,store:[1,12],store_const:12,store_nam:1,store_tru:12,str:[1,2,4,8,9,10,12,13,16,17],string:[1,2,7,8,10,12],stringsid:18,strip:12,strlen:8,strlena32:8,strlena64:8,strlenw32:8,strlenw64:8,struct:10,structur:[1,2,6,7,8,10,15],stub:7,stuff:[7,12],subclass:[2,9,16,17,18],subcommand:12,subject:1,subkei:[11,12],subkeys_nam:12,submodul:[8,17],subpars:12,success:8,support:1,sure:7,surkei:11,suspend:[10,12],suspendthread:18,svchost:12,sys:12,system32:[12,14],system:[1,4,6,7,9,10,13,15,16],systeminform:18,systeminformationclass:18,systeminformationlength:18,syswow64:[6,10,12,14],syswow64apiproxi:7,syswow:[10,14],szoid_nist_aes128_cbc:1,szoid_nist_aes192_cbc:1,szoid_nist_aes256_cbc:1,szoid_oiwsec_descbc:1,szoid_rsa_des_ede3_cbc:1,szoid_rsa_sha256rsa:12,szpassword:[12,18],tableclass:18,tagclsctx:18,tagcoinit:18,tagthreadentry32:10,take:[7,18],talk:7,target:[2,7,10,12,16,21],target_addr:12,target_fil:12,target_func:12,target_host:12,target_nam:12,target_pag:12,target_port:12,targetedbit:10,tcp4:9,tcp4connect:9,tcp6:9,tcp6connect:9,tcp:[9,12],tcp_table_owner_pid_al:18,teb:10,teb_bas:10,techniqu:5,tell:1,temporari:[1,3],termin:10,terminaison:12,terminateprocess:18,terminatethread:18,test:[2,12],test_cod:12,test_code_x64:12,test_code_x86:12,text:12,th32processid:18,thei:12,them:[2,7,15],themself:17,thi:[0,1,2,3,5,7,8,10,12,15,17,18],thing:[7,8,18],thisit:0,those:[2,3,5,7,8],thread32first:18,thread32next:18,thread:[2,6,12,15,17,18],thread_all_access:18,thread_exec:12,threadhandl:18,threadinform:18,threadinformationclass:18,threadinformationlength:18,three:0,through:15,tid:10,time:[1,10,12,18],time_info:10,timeinfo:10,timeout:[10,18],tmp:12,to_dump:3,todo:[4,17],token:15,tokenhandl:18,tokeninform:18,tokeninformationclass:18,tokeninformationlength:18,trace:12,traceback:[12,18],transform:[7,10],transform_type_to_remote32bit:7,transform_type_to_remote64bit:7,transpar:18,tri:18,trigger:[2,12],trivial:7,trust:[1,12],trust_e_nosignatur:12,try_generate_stub_target:7,tupl:3,two:[5,7,19],txt:[0,12],type:[1,2,3,4,7,8,9,10,11,12,13,16,17,21],typeerror:18,typenam:12,ucchmax:18,uexitcod:18,ugli:[7,20],ukvab:12,ulaf:18,ulong64:[7,10],ulopt:[12,18],ultra:20,uncompressedbuff:18,uncompressedbuffers:18,unicod:[9,10],unicode_string_addr:12,unknow:17,unknown1:18,unknown2:18,unknown:[12,18],unload_dl:2,unstabl:20,usabl:14,use:[0,1,2,3,5,7,8,12,17],used:[0,1,8,10,12],useful:[12,19],user:[10,12,21],usermodetim:12,usernam:10,using:[0,1,5,6,7,8],utf16:10,utf8:[],util:[6,10,12,17],uxthem:12,valid:[12,19],valu:[1,2,3,7,8,9,10,11,12,14,16,17,18],value_nam:11,valueerror:[8,10,12],vari:3,variabl:12,variant_bool:12,variou:[8,15,18],vector:[1,15],vectorcontrol:3,vectoredexcept:[2,3,6],vectoredhandl:18,vectorregist:3,veh:12,veh_segv:12,vendorid:8,ver_nt_domain_control:17,ver_nt_serv:17,ver_nt_workst:[12,17],verif:12,verifi:12,verqueryvaluea:18,verqueryvaluew:18,version:[7,12,17],version_nam:[12,17],via:[8,10,12],view:3,vif:3,vip:3,virtual_alloc:[10,12],virtual_fre:10,virtual_protect:[2,10],virtualalloc:[6,12],virtualallocex:18,virtualfre:18,virtualfreeex:18,virtualprotect:[10,12,18],virtualprotectex:18,virtualqueryex:18,vista:17,vol:12,volatil:12,volum:[6,15,17],vsvmktr:12,vtabl:0,vtbtmfegccsgaqufbzachkvodhrwoi8vd3d3lm1py3jvc29mdc5jb20vcgtpb3bz:12,wai:[0,2,5,12],wait:[10,12],waitfordebugev:18,waitforsingleobject:18,want:7,wchvemxqxk5eofne6yekuarbgbmnwltfrpwklmvtnl9r:12,whatev:0,when:[0,2,7,10],where:[2,7],which:[2,3,9],whole:10,wide:8,win32:2,win32_logicaldisk:12,win32_process:12,wincfunc:7,windef:[12,14],window:[3,4,6,7,9,11,13,16,21],windowfrompoint:18,windows_info:12,windowscert:12,windowserror:[12,18],windowsvers:12,winerror:1,winfunc:[12,18],winmm:12,winobject:[0,2,3,4,7,9,10,11,12,13,16,17,21],winoject:12,winprocess:[2,4,7,13,15,17],winproxi:[2,6,7,12,14,17],winstruct:[10,12,13],winsx:12,winthread:[12,15,17],wintrust:6,winunicodestr:[10,12],winverifytrust:18,without:[2,5,12,18],wmi:[0,6,15,17],wmi_request:12,wmirequest:[12,17,21],won:2,word:10,work:[6,7,10,12],workaround:3,would:12,wow64disablewow64fsredirect:18,wow64enablewow64fsredirect:18,wow64fsenableredirect:18,wow64getthreadcontext:18,wow64revertwow64fsredirect:18,wow64setthreadcontext:18,wrap:14,wrapper:[1,7,11,14,18,19],write:[0,1,2,10,12],write_byt:10,write_code_in_target:12,write_dword:10,write_memori:[10,12],write_qword:10,write_short:10,writefil:18,writeprocessmemori:18,wrote:12,wstring:8,wstring_addr:12,wvalu:12,x000:12,x001:12,x00:[8,12],x00u:8,x010:12,x01:[8,12],x01t:12,x02:[8,12],x02us1:12,x03:[8,12],x03u:12,x040:12,x04:[8,12],x04f:8,x05:12,x05y:12,x06:12,x07:12,x07redmond1:12,x08:[8,12],x0b0:12,x0c:[8,12],x0e:12,x100:12,x10:[8,12],x10w:12,x11:[8,12],x11u:12,x12x:12,x130:12,x133:12,x13:12,x14:12,x14f:12,x151:12,x15microsoft:12,x17:12,x18:12,x19:12,x1am:12,x1av:12,x1b:12,x1c:12,x1e0:12,x1f:12,x64:[6,7,12,17],x64_cpuid:8,x7f:12,x80:[8,12],x80v:12,x81:[8,12],x82:12,x841:12,x84:8,x84qy:12,x86:[6,12],x86_cpuid:8,x86_microsoft:12,x86cpuidresult:8,x86h:12,x870:12,x89:[8,12],x8b:8,x8ba:8,x8bn:8,x8bq:8,x8c:12,x8ez:12,x90:12,x91:12,x93:12,x94:12,x977:8,x99cea:12,xa0:12,xa2d:12,xa4:12,xa6:12,xa6uo:12,xaahpj:12,xaam:12,xabnzr:12,xabo:12,xac:12,xad:12,xaf:12,xb2:12,xb3:12,xb8:12,xb9:12,xb9k:12,xbb:12,xbbybpu6:12,xbc:12,xc0:[8,12],xc0bbbb:8,xc2:12,xc2rg:12,xc30:12,xc3:8,xc6:12,xc7:8,xc8:12,xca:12,xcc:12,xcctv:12,xcd:12,xce:12,xd0z:12,xd1n:12,xd2m:12,xd4:12,xd4j:12,xd8:8,xd8t:12,xd9:12,xdc:12,xe0lwf:12,xe1:12,xe3:12,xe5:12,xe7:12,xe8:[8,12],xe9:12,xeb:8,xec:12,xeckk:12,xed9:12,xed:12,xedf:12,xee:8,xef1:8,xef:8,xf2:12,xf3:12,xf5:12,xf7:12,xf8:[8,12],xf9:[8,12],xfal:12,xfd:12,xfe:8,xor:8,y3jsl01py1dpblbyb1bdqtiwmtffmjaxms0xmc0xos5jcmwwyqyikwybbquhaqe:12,yaeno:12,yet:1,ygawibagitmwaaaqzuwyxemckydgaaaaabbjanbgkqhkig9w0baqsf:12,yield:10,yolocertif:12,yolohxbp:12,yop:12,you:[0,2,3,5,10,12,17],your:[0,3,5,8],yourself:0,yun:12,z5pmuf8va9tmfqg:12,zdexmge1yzq1ntuymb8ga1udiwqymbaafkkpajmofssxem2q:12,znqgq29ycg9yyxrpb24xgjaybgnvbamteu1py3jvc29mdcbxaw5kb3dzmiibijan:12},titles:["8. windows.com - Component Object Model","9. windows.crypto – CryptoAPI","7. windows.debug – Debugging","2.4. Exception and Context related structures","2.10. Handle – Processes handles","10. IAT hooking","Welcome to PythonForWindows’s documentation!","12. Internals","3. windows.native_exec – Native Code Execution","2.6. Network","2.1. Processes and Threads","2.5. Registry","13. Samples of code","2.7. Service","5. windows.utils – Windows Utilities","2. The windows objects","2.8. Volume – The logical drives","1. The windows module","4. windows.winproxy – Windows API","6. windows.wintrust – Checking signature","11. Early Work In Progress","2.9. WMI – Make request to WMI"],titleterms:{"function":[8,14,18],The:[15,16,17],Using:0,api:[18,19],argument:5,assembl:8,breakpoint:2,callback:5,certif:[1,12],certificatecontext:1,check:19,code:[8,12],com:[0,12],compon:[0,1],connect:9,context:[3,14],cpuid:8,cross:7,cryptcontext:1,crypto:[1,12],cryptoapi:1,cryptobject:1,current:12,current_process:12,currentprocess:10,currentthread:10,debug:[2,3,12],debugg:[2,12],decrypt:1,demo:12,disablewow64fsredirect:14,document:6,drive:16,earli:20,ehcertstor:1,encrypt:[1,12],exampl:18,except:3,execut:8,explor:[10,12],firewal:9,functionbp:12,gate:7,gener:1,generate_kei:1,generate_pfx:1,generate_selfsigned_certif:1,handl:4,heaven:7,helper:14,hook:[5,12],iat:[5,12],iatentri:10,implement:0,import_pfx:1,indic:6,inetfwpolicy2:12,info:3,inform:5,interfac:[0,8],intern:7,keyvalu:11,load:10,loadedmodul:10,local:12,localdebugg:[2,12],logic:16,make:[12,21],manag:14,model:0,modul:17,nativ:[8,12],native_exec:8,nativeutil:8,network:[9,12],object:[0,15,17],pars:10,pe_pars:10,peb:[10,12],pefil:10,pointer:3,process:[4,10,12],progress:20,protocol:5,put:5,pyhkei:11,pythonforwindow:6,record:3,registri:[11,12],relat:3,remot:12,remotectyp:7,request:[12,21],sampl:12,servic:13,signatur:19,signaturedata:19,simple_x64:8,simple_x86:8,singl:12,socket:12,step:12,structur:3,system:[12,17],syswow64:7,tabl:6,tester:12,testeur:[],thread:10,token:10,type:5,using:12,util:[8,14],vector:3,vectoredexcept:12,virtualalloc:18,virtualprotect:14,volum:16,welcom:6,window:[0,1,2,5,8,10,12,14,15,17,18,19],winprocess:[10,12],winproxi:18,winthread:10,wintrust:[12,19],wmi:[12,21],work:20,x64:8,x86:8}}) \ No newline at end of file diff --git a/docs/build/html/service.html b/docs/build/html/service.html index 79c0959..f6f4d91 100644 --- a/docs/build/html/service.html +++ b/docs/build/html/service.html @@ -238,7 +238,7 @@ \ No newline at end of file diff --git a/docs/build/html/utils.html b/docs/build/html/utils.html index 960a8ff..1e25f28 100644 --- a/docs/build/html/utils.html +++ b/docs/build/html/utils.html @@ -213,7 +213,7 @@ Useful in injection of GUI process

    \ No newline at end of file diff --git a/docs/build/html/various.html b/docs/build/html/various.html index b6a2fcb..0dcfb0d 100644 --- a/docs/build/html/various.html +++ b/docs/build/html/various.html @@ -162,7 +162,7 @@ parts are accessible.

    \ No newline at end of file diff --git a/docs/build/html/volume.html b/docs/build/html/volume.html index b0ac3a3..9296d5f 100644 --- a/docs/build/html/volume.html +++ b/docs/build/html/volume.html @@ -175,7 +175,7 @@ \ No newline at end of file diff --git a/docs/build/html/windows.html b/docs/build/html/windows.html index 672bded..0a64618 100644 --- a/docs/build/html/windows.html +++ b/docs/build/html/windows.html @@ -145,7 +145,7 @@ It also offers some submodules aimed to help the interfacing with
    -network = <windows.winobject.network.Network object at 0x04C87C90>
    +network = <windows.winobject.network.Network object>

    Object of class windows.winobject.network.Network

    @@ -186,7 +186,7 @@ It also offers some submodules aimed to help the interfacing with
    -registry = <windows.winobject.registry.Registry object at 0x04C87CB0>
    +registry = <windows.winobject.registry.Registry object>

    Object of class windows.winobject.registry.Registry

    @@ -347,7 +347,7 @@ It also offers some submodules aimed to help the interfacing with © Copyright 2015, Clement Rouault. - Created using Sphinx 1.5.2. + Created using Sphinx 1.5.5. \ No newline at end of file diff --git a/docs/build/html/winproxy.html b/docs/build/html/winproxy.html index 332c35d..fa26ef4 100644 --- a/docs/build/html/winproxy.html +++ b/docs/build/html/winproxy.html @@ -1435,7 +1435,7 @@ It also heavily relies on © Copyright 2015, Clement Rouault. - Created using Sphinx 1.5.2. + Created using Sphinx 1.5.5. \ No newline at end of file diff --git a/docs/build/html/wintrust.html b/docs/build/html/wintrust.html index 967c2d1..3dbcae7 100644 --- a/docs/build/html/wintrust.html +++ b/docs/build/html/wintrust.html @@ -232,7 +232,7 @@ It allows to check the signature of a file.

    \ No newline at end of file diff --git a/docs/build/html/wip.html b/docs/build/html/wip.html index c768605..4f7fe4e 100644 --- a/docs/build/html/wip.html +++ b/docs/build/html/wip.html @@ -113,7 +113,7 @@ \ No newline at end of file diff --git a/docs/build/html/wmi.html b/docs/build/html/wmi.html index 920f026..eefbc37 100644 --- a/docs/build/html/wmi.html +++ b/docs/build/html/wmi.html @@ -137,7 +137,7 @@ \ No newline at end of file