hakril-PythonForWindows/docs/build/html/searchindex.js

Search.setIndex({docnames:["com","crypto","debug","exception","handle","iat_hook","index","internals","native_exec","network","process","registry","sample","service","utils","various","volume","windows","winproxy","wintrust","wip","wmi"],envversion:50,filenames:["com.rst","crypto.rst","debug.rst","exception.rst","handle.rst","iat_hook.rst","index.rst","internals.rst","native_exec.rst","network.rst","process.rst","registry.rst","sample.rst","service.rst","utils.rst","various.rst","volume.rst","windows.rst","winproxy.rst","wintrust.rst","wip.rst","wmi.rst"],objects:{"windows.crypto":{CertificateContext:[1,1,1,""],CryptContext:[1,1,1,""],CryptObject:[1,1,1,""],EHCERTSTORE:[1,1,1,""],decrypt:[1,5,1,""],encrypt:[1,5,1,""],generation:[1,0,0,"-"],import_pfx:[1,5,1,""]},"windows.crypto.CertificateContext":{chains:[1,2,1,""],contents:[1,2,1,""],duplicate:[1,3,1,""],encoded:[1,2,1,""],from_buffer:[1,4,1,""],from_file:[1,4,1,""],get_name:[1,3,1,""],issuer:[1,2,1,""],name:[1,2,1,""],raw_serial:[1,2,1,""],serial:[1,2,1,""],store:[1,2,1,""]},"windows.crypto.CryptContext":{contents:[1,2,1,""]},"windows.crypto.CryptObject":{cert:[1,2,1,""],get_cert:[1,3,1,""],get_signer_certificate:[1,3,1,""],get_signer_data:[1,3,1,""],nb_cert:[1,2,1,""],nb_signer:[1,2,1,""]},"windows.crypto.EHCERTSTORE":{add_certificate:[1,3,1,""],certs:[1,2,1,""],from_file:[1,4,1,""],from_system_store:[1,4,1,""],new_in_memory:[1,4,1,""],value:[1,2,1,""]},"windows.crypto.generation":{generate_key:[1,5,1,""],generate_pfx:[1,5,1,""],generate_selfsigned_certificate:[1,5,1,""]},"windows.debug":{Breakpoint:[2,1,1,""],Debugger:[2,1,1,""],FunctionBP:[2,1,1,""],HXBreakpoint:[2,1,1,""],LocalDebugger:[2,1,1,""],MemoryBreakpoint:[2,1,1,""]},"windows.debug.Breakpoint":{trigger:[2,3,1,""]},"windows.debug.Debugger":{DisabledMemoryBreakpoint:[2,3,1,""],__init__:[2,3,1,""],add_bp:[2,3,1,""],attach:[2,4,1,""],debug:[2,4,1,""],del_bp:[2,3,1,""],detach:[2,3,1,""],disable_all_memory_breakpoints:[2,3,1,""],get_exception_bitness:[2,3,1,""],get_memory_breakpoint_at:[2,3,1,""],loop:[2,3,1,""],on_create_process:[2,3,1,""],on_create_thread:[2,3,1,""],on_exception:[2,3,1,""],on_exit_process:[2,3,1,""],on_exit_thread:[2,3,1,""],on_load_dll:[2,3,1,""],on_output_debug_string:[2,3,1,""],on_rip:[2,3,1,""],on_single_step:[2,3,1,""],on_unload_dll:[2,3,1,""],restore_all_memory_breakpoints:[2,3,1,""],single_step:[2,3,1,""]},"windows.debug.FunctionBP":{break_on_ret:[2,3,1,""],extract_arguments:[2,3,1,""],ret_trigger:[2,3,1,""],trigger:[2,3,1,""]},"windows.debug.HXBreakpoint":{trigger:[2,3,1,""]},"windows.debug.LocalDebugger":{add_bp:[2,3,1,""],del_bp:[2,3,1,""],get_exception_code:[2,3,1,""],get_exception_context:[2,3,1,""],on_exception:[2,3,1,""],single_step:[2,3,1,""]},"windows.debug.MemoryBreakpoint":{__init__:[2,3,1,""],trigger:[2,3,1,""]},"windows.hooks":{Callback:[5,1,1,""],IATHook:[5,1,1,""]},"windows.hooks.IATHook":{disable:[5,3,1,""],enable:[5,3,1,""]},"windows.native_exec":{cpuid:[8,0,0,"-"],create_function:[8,5,1,""],nativeutils:[8,0,0,"-"],simple_x64:[8,0,0,"-"],simple_x86:[8,0,0,"-"]},"windows.native_exec.cpuid":{X86CpuidResult:[8,1,1,""],do_cpuid:[8,5,1,""],get_proc_family_model:[8,5,1,""],get_vendor_id:[8,5,1,""],is_amd_proc:[8,5,1,""],is_intel_proc:[8,5,1,""],x64_cpuid:[8,5,1,""],x86_cpuid:[8,5,1,""]},"windows.native_exec.cpuid.X86CpuidResult":{fields:[8,2,1,""]},"windows.native_exec.simple_x86":{create_displacement:[8,5,1,""],deref:[8,5,1,""],mem:[8,5,1,""],mem_access:[8,1,1,""]},"windows.native_exec.simple_x86.mem_access":{base:[8,2,1,""],disp:[8,2,1,""],index:[8,2,1,""],prefix:[8,2,1,""],scale:[8,2,1,""]},"windows.pe_parse":{GetPEFile:[10,5,1,""],IATEntry:[10,1,1,""],PEFile:[10,1,1,""]},"windows.pe_parse.IATEntry":{addr:[10,6,1,""],name:[10,6,1,""],ord:[10,6,1,""],remove_hook:[10,3,1,""],set_hook:[10,3,1,""],value:[10,6,1,""]},"windows.pe_parse.PEFile":{export_name:[10,2,1,""],exports:[10,2,1,""],imports:[10,2,1,""]},"windows.remotectypes":{transform_type_to_remote32bits:[7,5,1,""],transform_type_to_remote64bits:[7,5,1,""]},"windows.syswow64":{LdrLoadDll_32_to_64:[7,5,1,""],NtCreateThreadEx_32_to_64:[7,5,1,""],NtGetContextThread_32_to_64:[7,5,1,""],NtQueryInformationProcess_32_to_64:[7,5,1,""],NtQueryInformationThread_32_to_64:[7,5,1,""],NtQueryVirtualMemory_32_to_64:[7,5,1,""],NtSetContextThread_32_to_64:[7,5,1,""],Syswow64ApiProxy:[7,1,1,""],execute_64bits_code_from_syswow:[7,5,1,""],generate_syswow64_call:[7,5,1,""],try_generate_stub_target:[7,5,1,""]},"windows.utils":{DisableWow64FsRedirection:[14,1,1,""],VirtualProtected:[14,1,1,""],check_debug:[14,5,1,""],check_is_elevated:[14,5,1,""],create_console:[14,5,1,""],create_file_from_handle:[14,5,1,""],create_process:[14,5,1,""],enable_privilege:[14,5,1,""],get_handle_from_file:[14,5,1,""],pop_shell:[14,5,1,""]},"windows.winobject":{exception:[3,0,0,"-"],handle:[4,0,0,"-"],network:[9,0,0,"-"],process:[10,0,0,"-"],registry:[11,0,0,"-"],service:[13,0,0,"-"],volume:[16,0,0,"-"],wmi:[21,0,0,"-"]},"windows.winobject.exception":{ECONTEXT32:[3,1,1,""],ECONTEXT64:[3,1,1,""],ECONTEXTWOW64:[3,1,1,""],EDr7:[3,1,1,""],EEXCEPTION_DEBUG_INFO32:[3,1,1,""],EEXCEPTION_DEBUG_INFO64:[3,1,1,""],EEXCEPTION_POINTERS:[3,1,1,""],EEXCEPTION_RECORD32:[3,1,1,""],EEXCEPTION_RECORD64:[3,1,1,""],EEXCEPTION_RECORD:[3,1,1,""],EEflags:[3,1,1,""],VectoredException:[3,1,1,""]},"windows.winobject.exception.ECONTEXT32":{EDr7:[3,2,1,""],EEFlags:[3,2,1,""],dump:[3,3,1,""],fields:[3,2,1,""],func_result:[3,2,1,""],pc:[3,2,1,""],regs:[3,3,1,""],sp:[3,2,1,""]},"windows.winobject.exception.ECONTEXT64":{EDr7:[3,2,1,""],EEFlags:[3,2,1,""],dump:[3,3,1,""],fields:[3,2,1,""],func_result:[3,2,1,""],new_aligned:[3,4,1,""],pc:[3,2,1,""],regs:[3,3,1,""],sp:[3,2,1,""]},"windows.winobject.exception.ECONTEXTWOW64":{EDr7:[3,2,1,""],EEFlags:[3,2,1,""],dump:[3,3,1,""],fields:[3,2,1,""],func_result:[3,2,1,""],pc:[3,2,1,""],regs:[3,3,1,""],sp:[3,2,1,""]},"windows.winobject.exception.EDr7":{fields:[3,2,1,""]},"windows.winobject.exception.EEXCEPTION_DEBUG_INFO32":{ExceptionRecord:[3,6,1,""],fields:[3,2,1,""]},"windows.winobject.exception.EEXCEPTION_DEBUG_INFO64":{ExceptionRecord:[3,6,1,""],fields:[3,2,1,""]},"windows.winobject.exception.EEXCEPTION_POINTERS":{ContextRecord:[3,6,1,""],ExceptionRecord:[3,6,1,""],dump:[3,3,1,""]},"windows.winobject.exception.EEXCEPTION_RECORD":{ExceptionAddress:[3,2,1,""],ExceptionCode:[3,2,1,""],fields:[3,2,1,""]},"windows.winobject.exception.EEXCEPTION_RECORD32":{ExceptionAddress:[3,2,1,""],ExceptionCode:[3,2,1,""],fields:[3,2,1,""]},"windows.winobject.exception.EEXCEPTION_RECORD64":{ExceptionAddress:[3,2,1,""],ExceptionCode:[3,2,1,""],fields:[3,2,1,""]},"windows.winobject.exception.EEflags":{fields:[3,2,1,""],raw:[3,2,1,""]},"windows.winobject.handle":{Handle:[4,1,1,""]},"windows.winobject.handle.Handle":{infos:[4,2,1,""],local_handle:[4,2,1,""],name:[4,2,1,""],process:[4,2,1,""],type:[4,2,1,""]},"windows.winobject.network":{Firewall:[9,1,1,""],FirewallRule:[9,1,1,""],Network:[9,1,1,""],TCP4Connection:[9,1,1,""],TCP6Connection:[9,1,1,""]},"windows.winobject.network.Firewall":{current_profile_types:[9,2,1,""],enabled:[9,2,1,""],rules:[9,2,1,""],value:[9,2,1,""]},"windows.winobject.network.FirewallRule":{action:[9,2,1,""],application_name:[9,2,1,""],description:[9,2,1,""],direction:[9,2,1,""],enabled:[9,2,1,""],grouping:[9,2,1,""],interface_types:[9,2,1,""],local_address:[9,2,1,""],local_port:[9,2,1,""],name:[9,2,1,""],protocol:[9,2,1,""],remote_address:[9,2,1,""],remote_port:[9,2,1,""],service_name:[9,2,1,""],value:[9,2,1,""]},"windows.winobject.network.Network":{firewall:[9,2,1,""],ipv4:[9,2,1,""],ipv6:[9,2,1,""]},"windows.winobject.network.TCP4Connection":{close:[9,3,1,""],established:[9,2,1,""],local_addr:[9,2,1,""],local_port:[9,2,1,""],remote_addr:[9,2,1,""],remote_host:[9,2,1,""],remote_port:[9,2,1,""],remote_proto:[9,2,1,""]},"windows.winobject.network.TCP6Connection":{established:[9,2,1,""],local_addr:[9,2,1,""],local_port:[9,2,1,""],remote_addr:[9,2,1,""],remote_host:[9,2,1,""],remote_port:[9,2,1,""],remote_proto:[9,2,1,""]},"windows.winobject.process":{CurrentProcess:[10,1,1,""],CurrentThread:[10,1,1,""],DeadThread:[10,1,1,""],LoadedModule:[10,1,1,""],PEB:[10,1,1,""],Token:[10,1,1,""],WinProcess:[10,1,1,""],WinThread:[10,1,1,""],WinUnicodeString:[10,1,1,""]},"windows.winobject.process.CurrentProcess":{allocated_memory:[10,3,1,""],bitness:[10,2,1,""],create_thread:[10,3,1,""],execute:[10,3,1,""],exit:[10,3,1,""],exit_code:[10,2,1,""],get_mapped_filename:[10,3,1,""],handle:[10,2,1,""],is_exit:[10,2,1,""],is_wow_64:[10,2,1,""],memory_state:[10,3,1,""],peb:[10,2,1,""],peb_syswow:[10,2,1,""],pid:[10,2,1,""],ppid:[10,2,1,""],query_memory:[10,3,1,""],read_byte:[10,3,1,""],read_dword:[10,3,1,""],read_memory:[10,3,1,""],read_ptr:[10,3,1,""],read_qword:[10,3,1,""],read_short:[10,3,1,""],read_string:[10,3,1,""],read_wstring:[10,3,1,""],threads:[10,2,1,""],time_info:[10,2,1,""],virtual_alloc:[10,3,1,""],virtual_free:[10,3,1,""],virtual_protect:[10,3,1,""],virtual_protected:[10,3,1,""],wait:[10,3,1,""],write_byte:[10,3,1,""],write_dword:[10,3,1,""],write_memory:[10,3,1,""],write_qword:[10,3,1,""],write_short:[10,3,1,""]},"windows.winobject.process.CurrentThread":{exit:[10,3,1,""],handle:[10,2,1,""],owner:[10,2,1,""],tid:[10,2,1,""],wait:[10,3,1,""]},"windows.winobject.process.DeadThread":{exit_code:[10,2,1,""],handle:[10,2,1,""],is_exit:[10,2,1,""],wait:[10,3,1,""]},"windows.winobject.process.LoadedModule":{baseaddr:[10,2,1,""],fullname:[10,2,1,""],name:[10,2,1,""],pe:[10,2,1,""]},"windows.winobject.process.PEB":{commandline:[10,2,1,""],imagepath:[10,2,1,""],modules:[10,2,1,""]},"windows.winobject.process.Token":{computername:[10,2,1,""],handle:[10,2,1,""],integrity:[10,2,1,""],is_elevated:[10,2,1,""],username:[10,2,1,""],wait:[10,3,1,""]},"windows.winobject.process.WinProcess":{allocated_memory:[10,3,1,""],bitness:[10,2,1,""],create_thread:[10,3,1,""],execute:[10,3,1,""],execute_python:[10,3,1,""],execute_python_unsafe:[10,3,1,""],exit:[10,3,1,""],exit_code:[10,2,1,""],get_mapped_filename:[10,3,1,""],handle:[10,2,1,""],is_exit:[10,2,1,""],is_wow_64:[10,2,1,""],load_library:[10,3,1,""],memory_state:[10,3,1,""],name:[10,2,1,""],peb:[10,2,1,""],peb_addr:[10,2,1,""],peb_syswow:[10,2,1,""],pid:[10,2,1,""],ppid:[10,2,1,""],query_memory:[10,3,1,""],read_byte:[10,3,1,""],read_dword:[10,3,1,""],read_memory:[10,3,1,""],read_memory_into:[10,3,1,""],read_ptr:[10,3,1,""],read_qword:[10,3,1,""],read_short:[10,3,1,""],read_string:[10,3,1,""],read_wstring:[10,3,1,""],threads:[10,2,1,""],time_info:[10,2,1,""],virtual_alloc:[10,3,1,""],virtual_free:[10,3,1,""],virtual_protect:[10,3,1,""],virtual_protected:[10,3,1,""],wait:[10,3,1,""],write_byte:[10,3,1,""],write_dword:[10,3,1,""],write_memory:[10,3,1,""],write_qword:[10,3,1,""],write_short:[10,3,1,""]},"windows.winobject.process.WinThread":{context:[10,2,1,""],context_syswow:[10,2,1,""],exit:[10,3,1,""],exit_code:[10,2,1,""],handle:[10,2,1,""],is_exit:[10,2,1,""],owner:[10,2,1,""],resume:[10,3,1,""],set_context:[10,3,1,""],set_syswow_context:[10,3,1,""],start_address:[10,2,1,""],suspend:[10,3,1,""],teb_base:[10,2,1,""],tid:[10,2,1,""],wait:[10,3,1,""]},"windows.winobject.process.WinUnicodeString":{fields:[10,2,1,""],str:[10,2,1,""]},"windows.winobject.registry":{KeyValue:[11,1,1,""],PyHKey:[11,1,1,""],Registry:[11,1,1,""]},"windows.winobject.registry.KeyValue":{name:[11,2,1,""],type:[11,2,1,""],value:[11,2,1,""]},"windows.winobject.registry.PyHKey":{__call__:[11,5,1,""],__getitem__:[11,5,1,""],__setitem__:[11,5,1,""],get:[11,3,1,""],open_subkey:[11,3,1,""],set:[11,3,1,""],subkeys:[11,2,1,""],values:[11,2,1,""]},"windows.winobject.service":{ServiceA:[13,1,1,""],ServiceStatus:[13,1,1,""]},"windows.winobject.service.ServiceA":{description:[13,2,1,""],name:[13,2,1,""],process:[13,2,1,""],status:[13,2,1,""]},"windows.winobject.service.ServiceStatus":{control_accepted:[13,2,1,""],flags:[13,2,1,""],state:[13,2,1,""],type:[13,2,1,""]},"windows.winobject.system":{System:[17,1,1,""]},"windows.winobject.system.System":{bitness:[17,2,1,""],computer_name:[17,2,1,""],handles:[17,2,1,""],logicaldrives:[17,2,1,""],network:[17,2,1,""],processes:[17,2,1,""],product_type:[17,2,1,""],registry:[17,2,1,""],services:[17,2,1,""],threads:[17,2,1,""],version:[17,2,1,""],version_name:[17,2,1,""],wmi:[17,2,1,""]},"windows.winobject.volume":{LogicalDrive:[16,1,1,""]},"windows.winobject.volume.LogicalDrive":{name:[16,6,1,""],path:[16,2,1,""],type:[16,2,1,""]},"windows.winobject.wmi":{WmiRequester:[21,1,1,""]},"windows.winobject.wmi.WmiRequester":{select:[21,3,1,""]},"windows.wintrust":{SignatureData:[19,1,1,""],check_signature:[19,5,1,""],full_signature_information:[19,5,1,""],is_signed:[19,5,1,""]},"windows.wintrust.SignatureData":{additionalinfo:[19,2,1,""],catalog:[19,2,1,""],catalogsigned:[19,2,1,""],signed:[19,2,1,""]},windows:{com:[0,0,0,"-"],crypto:[1,0,0,"-"],debug:[2,0,0,"-"],hooks:[5,0,0,"-"],native_exec:[8,0,0,"-"],pe_parse:[10,0,0,"-"],remotectypes:[7,0,0,"-"],syswow64:[7,0,0,"-"],utils:[14,0,0,"-"],winproxy:[18,0,0,"-"],wintrust:[19,0,0,"-"]}},objnames:{"0":["py","module","Python module"],"1":["py","class","Python class"],"2":["py","attribute","Python attribute"],"3":["py","method","Python method"],"4":["py","classmethod","Python class method"],"5":["py","function","Python function"],"6":["py","data","Python data"]},objtypes:{"0":"py:module","1":"py:class","2":"py:attribute","3":"py:method","4":"py:classmethod","5":"py:function","6":"py:data"},terms:{"00c04fc295ee":12,"02x":12,"059cb1ba1a41433a18dd8f87422c2ac3bf35b7b8":12,"08x":12,"0x0":12,"0x02649b70":12,"0x026ddd00":[],"0x0272d350":12,"0x02941290":12,"0x02b37ef0":12,"0x02dc8210":12,"0x02ed63f0":18,"0x030a2590":12,"0x03243770":8,"0x0330d990":8,"0x03f6cda0":12,"0x04c87c90":[],"0x04c87cb0":[],"0x0c000000d":8,"0x0l":[9,12,16,18],"0x1":8,"0x10":[2,8,12],"0x1000":[12,18],"0x10002":12,"0x1000l":18,"0x100l":13,"0x10202":12,"0x10202l":12,"0x108":12,"0x10l":13,"0x11111111":8,"0x11223344":12,"0x11223344l":12,"0x12345678":12,"0x12d687":12,"0x1337":12,"0x1337l":12,"0x154":12,"0x1b":12,"0x1d1ab574":12,"0x1db0000":12,"0x1db0010":12,"0x1f03ffl":18,"0x1f0fffl":18,"0x1l":[1,9,12,13,16,17,18],"0x2":8,"0x200":12,"0x20019l":11,"0x200l":12,"0x202l":12,"0x20590b3ccbc":12,"0x205a1d60000":12,"0x205a1d60000l":12,"0x20l":[12,13],"0x23":7,"0x2649c60":12,"0x2649d50":12,"0x26ddc60":[],"0x26dde40":[],"0x26ddee0":[],"0x26ddf30":[],"0x272a030":12,"0x272a080":12,"0x272acb0":12,"0x272ad00":12,"0x272ad50":12,"0x272ada0":12,"0x27bd5d0":[],"0x27f7f30":[],"0x27f7f80":[],"0x27fa030":[],"0x2a":12,"0x2e64750":12,"0x2l":[9,12,13,16,17],"0x31200efe":12,"0x32d3210":12,"0x33":7,"0x3bfae4l":12,"0x3f0000":12,"0x3f0000l":12,"0x3f0007":12,"0x3f0007l":12,"0x3f6ce40":12,"0x3f6cee0":12,"0x3f6cf30":12,"0x3f6cf80":12,"0x3ffel":1,"0x3l":[12,13,16,17,18],"0x4":12,"0x40ce850":12,"0x40l":[10,18],"0x41":12,"0x41faee0":12,"0x41faf30":12,"0x42":12,"0x424242":12,"0x42424242":[8,12,14],"0x4242424243434343":12,"0x4242424243434343l":12,"0x4242424243444546":5,"0x42424242l":12,"0x4l":[1,9,12,13,16,18],"0x5a6000l":12,"0x5c90000":[],"0x5l":[13,16,18],"0x6f80000":12,"0x6l":[13,16],"0x7":12,"0x770d7c04":12,"0x774c0000":12,"0x77541128l":12,"0x77a73bad":12,"0x77ae3c7d":12,"0x7f":12,"0x7ffa3c700000l":12,"0x7ffa3c70f0f0l":12,"0x7ffa3c70f0f5l":12,"0x7ffa3c70f0fal":12,"0x7ffa3c70f0ffl":12,"0x7ffa3c70f100l":12,"0x7l":13,"0x8":12,"0x80000000l":18,"0x80000001l":12,"0x80000003l":12,"0x80000004l":12,"0x8000l":18,"0x8009200c":1,"0x800b0100l":12,"0x80l":18,"0x8984848":12,"0x8d0006":12,"0x8d000c":12,"0x8d0011":12,"0x8d0017":12,"0x8d001c":12,"0x8d0022":12,"0x8d0023":12,"0x8e0000":12,"0x8e0004":12,"0x9":12,"0xa":12,"0xac":12,"0xal":12,"0xc":8,"0xc0000005l":12,"0xcf0002":12,"0xcf0003":12,"0xcf0004":12,"0xcf0005":12,"0xd":12,"0xd60000":12,"0xe24a88fa78":12,"0xe24a88fa78l":12,"0xe24a88fa88":12,"0xe24a88fa88l":12,"0xe24aaf9000l":12,"0xf001fl":18,"0xf003fl":18,"0xff":12,"0xfffffffe":8,"0xffffffff":[5,8,18],"0xfffffffffffffffe":8,"0xffffffffffffffff":8,"0xffffffffl":[10,18],"11d1":12,"129l":12,"13l":8,"17415_none_dad8722c5bcc2d8f":12,"1970169159l":8,"2001566688l":12,"2001570704l":12,"2001635616l":12,"2001647872l":12,"31bf3856ad364e35":12,"32b":[2,12],"32bit":[3,7,8,10],"36864l":1,"38ee":12,"3nblhjn":12,"41ac":12,"4aaptee6itt1kldio":12,"58l":8,"5ufw98n5sqgh":12,"64b":12,"64bit":[2,3,7,8,10],"6ae1":12,"7gwyr41uftkcl66ewhxlaowjmkkg6w2bp9byyqok10idedgace9vjr6m4jdh":12,"7jybzf4spmg4acoft85ao5u6tk5atpb7ypuulaivp8908dwtgqn":12,"817a":12,"85e5":12,"\u03bb":12,"abstract":7,"break":[2,7],"byte":10,"case":[1,7,12],"char":10,"class":[1,2,3,4,5,7,8,9,10,11,12,13,14,15,16,17,19,21],"const":12,"default":[1,2,12,17,18],"export":[7,8,10,12,17],"final":[0,7],"function":[0,2,3,5,6,7,10,12],"import":[1,5,8,10,12,18],"int":[1,2,3,4,8,9,10,12,16,17,19],"long":[9,16,17],"new":[1,3,10,14],"public":[2,12],"return":[0,1,2,3,5,7,8,10,11,12,14,18,19,21],"short":10,"super":12,"switch":7,"true":[9,10,12,14,18,19],"try":[1,5,11,12],"while":[5,10,12],For:[3,7],Its:8,NOT:[1,2,7,8,12,18],Not:[12,18],One:7,THE:10,That:12,The:[0,1,2,3,4,5,6,7,8,9,10,11,12,13,18,19],Then:[0,7],There:[0,2,5,12],These:8,Use:12,Useful:[2,14],Using:[5,6,8],With:[5,7],_______noumex______:14,__call__:11,__dict__:12,__file__:12,__getitem__:11,__init__:[2,7,12],__repr__:10,__setitem__:11,__unusedalign:3,_cprototyp:[12,18],_enum_service_status_processa:13,_tcp_table_class:18,_winreg:12,a1udhwrnmeswsabhoewgq2h0dha6ly93d3cubwljcm9zb2z0lmnvbs9wa2lvchmv:12,aa376039:1,aa377163:12,aa379918:12,aa388136:1,abil:0,abl:[1,2,7,10,12],about:[5,7,10,12,18,19],abspath:12,accept:[2,7,8,11],acceptconnect:18,access:[2,8,10,12,15,17],acpi:12,acquir:4,action:[9,12],activ:9,actual:10,adcbhdelmakga1uebhmcvvmxezarbgnvbagtcldhc2hpbmd0b24xedaobgnvbact:12,add:[0,1,2,12,18],add_argu:12,add_bp:[2,12],add_certif:[1,12],add_pars:12,add_subpars:12,additionalinfo:[12,19],addr:[2,10,12,14],address:[2,3,7,8,9,10,12],addvectoredcontinuehandl:18,addvectoredexceptionhandl:[2,3,12,18],adjusttokenprivileg:18,admin:[10,14],adv_import:12,advapi32:12,affect:2,after:2,again:5,aim:17,algid:18,algo:1,algorithm:[1,12],alia:[8,11,13,19],align:3,all:[0,1,2,3,7,8,12,18],all_calc:[],all_notepad:12,alloc:[7,10,12],allocated_memori:10,allocations:18,allocconsol:18,allow:[3,5,8,19],alpcgetmessageattribut:18,alpcinitializemessageattribut:18,alreadi:[7,10],also:[3,5,7,8,12,17,18],alwai:5,amd64:12,analys:12,analysi:12,ani:[1,2,7,8,13,19],anoth:[7,8,12,18],api:[0,2,5,6,7,8,10,12],api_nam:5,apinam:2,append:[8,12],appev:12,appinfo:12,appli:9,applic:[9,12],application_nam:9,appxbackupcontenttyp:12,arg1:8,arg2:8,arg:[2,10,12,14,18],arg_po:12,argpars:12,argument:[2,7,8,12,18],argument_posit:12,argumentpars:12,argv:[],around:[2,7,14,18,19],arrai:7,arround:[1,14],asauthsvc:18,ascii:[8,10,12,13],ask:[7,12],aspx:[1,2,12,14],assembl:[6,12],associ:9,at_keyexchang:[1,12],at_signatur:12,attach:2,attr:21,attribut:[0,10],attributeflag:18,authenticamd:8,author:12,autohandl:10,automaticali:10,avail:[1,18],axmltwljcm9zb2z0ifdpbmrvd3mguhjvzhvjdglvbibqq0egmjaxmtaefw0xnjew:12,b1jlzg1vbmqxhjacbgnvbaotfu1py3jvc29mdcbdb3jwb3jhdglvbjeumcwga1u:12,ba40727d7d257b00f89fc6ca7296c9833b7b75b2:0,backward:8,badpass:12,baiwadanbgkqhkig9w0baqsfaaocaqeavyc1iawgkoxxaotqxan0lj1j5vx01:12,base64:12,base:[2,8,10,12,13,18],base_addr:7,baseaddr:[10,12],baseaddress:18,basic:12,bbbb:12,bbyefbecivg:12,becaus:[7,12],been:[10,18],befor:10,begin:[8,12],behaviour:2,behind:5,being:[7,10],benableprivileg:14,bewar:14,bgkqhkig9w0baqefaaocaq8amiibcgkcaqeaywcacyghnink3ecpyu2uz7lcv9q:12,binherithandl:18,bit:[2,3,7,8,10,12,17],blablabla:[],blob:0,block:10,bool:[10,19],border:18,both:[5,7],break_on_ret:[2,12],breakpoint:[6,12],buffer:[1,7,10,12,18],bufferlength:18,buffers:18,byref:18,bytearrai:[1,12],c_char_p:7,c_uint:12,c_ulong:5,c_void_p:[5,7,12],calc:[12,14],calcul:7,call:[0,2,5,7,8,12,18],callabl:[2,3,5],callback:[2,10],callind:2,can:[0,2,3,5,8,10,12,18,19],cannot:12,capit:12,caption:12,care:7,carr:7,cast:12,cat:12,catalog:[12,19],catalogsign:[12,19],catroot:12,caus:[2,12],cauthsvc:18,cbbufsiz:18,cbcertencod:18,cbdata:12,cbencod:18,cbencryptedblob:18,cbhash:18,cbtobeencrypt:18,ccccbbbb:12,ccert:12,cchbuffer:18,cchbufferlength:18,cchfilenamemax:18,cchname:18,cchnamestr:18,cchreferenceddomainnam:18,cer:12,cert:[1,12,18,19],cert_name_simple_display_typ:1,cert_or_certlist:1,cert_query_content_flag_al:1,cert_query_content_pkcs7_signed_emb:12,cert_stor:[1,12],cert_to_verif:12,certaddcertificatecontexttostor:18,certcomparecertif:18,certcreatecertificatecontext:18,certcreateselfsigncertif:18,certduplicatecertificatecontext:[1,18],certenumcertificatecontextproperti:18,certenumcertificatesinstor:18,certfil:12,certfindcertificateinstor:18,certgetcertificatechain:18,certgetcertificatecontextproperti:18,certgetnamestringa:[1,18],certgetnamestringw:18,certif:6,certif_nam:12,certifact:12,certificatcontext:12,certificatecontext:12,certlist:12,certopenstor:18,certstrtonamea:18,certstrtonamew:18,certverifycertificatechainpolici:12,chain:[1,12],chang:[1,2,8,10],check:[6,12,14],check_debug:14,check_is_elev:[12,14],check_signatur:[12,19],choos:[3,12],chr:12,cimv2:[17,21],classmethod:[1,2,3],clientportobjectattribut:18,close:[9,10,12],closehandl:18,clsctx_inproc_serv:18,clsid:12,cmapi:12,cmd:12,cmp:8,cmsg_signer_info:1,cocreateinst:18,code3:0,code4:0,code:[0,2,3,6,7,10,17,20],code_addr:12,code_s:12,codetesteur:12,coinit_multithread:18,coinitializeex:18,coinitializesecur:18,com:[1,2,6,14,17],com_inetfwpolicy2:12,combinaison:8,comctl32:12,comimplement:0,cominterfac:0,command:[12,18],commandlin:[10,12],common:12,common_nam:12,commonnam:12,compar:18,complet:12,complex:8,compon:6,compressedbuff:18,compressedbuffers:18,compressionformat:18,comput:[17,18],computedfamili:8,computedmodel:8,computer_nam:[12,17],computernam:10,condit:8,condrv:12,conn:12,connect:[12,15],connectionmessag:18,connectionmessageattribut:18,connectionporthandl:18,connectionportobjectattribut:18,connectionrequest:18,consol:[12,14],contain:[1,8,12],contan:1,content:[1,6,10,12],content_typ:[1,12],context:[1,2,6,8,10,12,15,18],context_exec:12,context_syswow:10,contextflag:3,contextmanag:10,contextrecord:[3,12],contextu:14,continuedebugev:18,control:12,control_accept:[12,13],conveni:14,convertsidtostringsida:18,convertsidtostringsidw:18,convertstringsidtosida:18,convertstringsidtosidw:18,copi:[4,7],corporation1:12,correct:[7,12],correspond:2,counter:[3,12],cp_handl:12,cproc:2,cprovparam:12,cpuid:6,creat:[0,1,2,3,7,8,10,12,14],create_connect:12,create_consol:[12,14],create_displac:8,create_file_from_handl:14,create_funct:[8,12],create_inst:[0,12],create_process:[2,12,14],create_suspend:12,create_thread:[2,10,12],createdisposit:18,createfile_callback:5,createfilea:[5,12,18],createfileacallback:5,createfilemappinga:18,createfilemappingw:18,createfilew:18,createopt:18,createprocessa:[14,18],createprocessw:18,createremotethread:[7,18],createsuspend:18,createthread:18,createtoolhelp32snapshot:18,creation:10,crecipientcert:18,cross:6,crypt:12,crypt_algo:12,crypt_algorithm_identifi:12,crypt_deletekeyset:12,crypt_export:[1,12],crypt_key_prov_info:12,crypt_user_keyset:1,cryptacquirecertificateprivatekei:18,cryptacquirecontexta:18,cryptacquirecontextw:[1,12,18],cryptcatadminacquirecontext:18,cryptcatadmincalchashfromfilehandl:18,cryptcatadminenumcatalogfromhash:18,cryptcatadminreleasecatalogcontext:18,cryptcatadminreleasecontext:18,cryptcatcataloginfofromcontext:18,cryptcontext:12,cryptdecodeobject:18,cryptdecryptmessag:18,cryptdestroykei:[12,18],cryptencodeobjectex:18,cryptencryptmessag:18,cryptexportkei:18,cryptgenkei:[12,18],cryptmsggetparam:18,crypto:6,cryptoapi:[6,12],cryptobj:12,cryptobject:12,cryptpars:12,cryptqueryobject:18,cryptreleasecontext:[1,18],cs_32bit:7,cs_64bit:7,cthread:2,ctx:12,ctype:[1,5,7,8,10,12,14,18],ctypes_funct:[12,18],ctypes_gener:0,curent:10,current:[1,2,3,8,9,10,17,18],current_process:[2,5,7,10,17],current_profile_typ:9,current_thread:[2,12,17],current_us:12,currentprocess:[12,15,17],currentthread:[15,17],currentvers:12,cuwqtwgls2gd5a:12,dai:7,dat:12,data:[1,2,8,10,12,13],dbg:[2,12],dbg_continu:2,dbg_exception_not_handl:2,dbginterfac:0,dead:[2,10],deadlock:10,deadthread:10,debug:[6,14,15,17],debug_exeception_ev:2,debug_functionbp:12,debug_process:12,debug_str:2,debugactiveprocess:18,debugactiveprocessstop:18,debugbreak:18,debugbreakprocess:18,debugcontrol:3,debugg:6,debugger_membp_singlestep:12,debugger_print_ldrloaddl:12,debugingg:2,debugsetprocesskillonexit:18,decod:12,decor:[3,5],decrypt:12,decryptpars:12,def:[5,7,12,14],defin:3,definit:0,defint:0,del_bp:2,delet:2,demo:[1,8],depend:[8,10,12],deref:[8,12],describ:[8,15],descript:[8,9,12,13],descriptor:10,descrption:12,desiredaccess:18,desktop:[1,2,12],dest:12,destin:10,destroi:[10,12],detach:2,devic:[12,16],deviceapi:12,deviceiocontrol:18,dict:[9,10,12,21],didn:7,die:10,diff:12,differ:19,direct:9,directli:[0,1,7],directoryhandl:18,disabl:[2,5,14],disable_all_memory_breakpoint:2,disableallprivileg:18,disabledmemorybreakpoint:2,disassembl:2,disk:1,disp:8,dispatch:2,displac:8,displai:14,dll:[2,5,8,10,12,18,19],dll_load:12,dll_path:10,do_cpuid:8,doc:4,document:[2,12,18],doe:[7,8,12,18],don:[2,12,17],done:[5,7,10,12],dr0:3,dr1:3,dr2:3,dr3:3,dr6:3,dr7:3,drive:[6,12,15,17],drive_cdrom:16,drive_fix:[12,16],drive_no_root_dir:16,drive_ramdisk:16,drive_remot:16,drive_remov:16,drive_unknown:16,driver:12,drx:2,dst:12,dummyunionnam:3,dump:[3,12],duplic:1,duplicatehandl:[4,18],dwadddisposit:18,dwauthnlevel:18,dwblobtyp:18,dwcapabl:18,dwcertencodingtyp:18,dwclscontext:18,dwcoinit:18,dwcontinuestatu:18,dwcreationdisposit:[5,18],dwcreationflag:[2,10,12,14,18],dwdesiredaccess:[5,18],dwexitcod:18,dwexpectedcontenttypeflag:18,dwexpectedformattypeflag:18,dwfileoffsethigh:18,dwfileoffsetlow:18,dwfindflag:18,dwfindtyp:18,dwfirstchanc:3,dwflag:[1,12,18],dwflagsandattribut:[5,18],dwfreetyp:18,dwhandl:18,dwimplevel:18,dwindex:18,dwiocontrolcod:18,dwkeyspec:12,dwlen:18,dwlength:18,dwmaximumsizehigh:18,dwmaximumsizelow:18,dwmillisecond:18,dwmsgandcertencodingtyp:18,dwnumberofbytestomap:18,dwobjecttyp:18,dwoption:18,dword:[7,10],dwoutbuflen:18,dwparamtyp:18,dwprocessid:[12,18],dwpropid:18,dwprovtyp:[1,12,18],dwservicest:18,dwservicetyp:18,dwsharemod:[5,18],dwsize:18,dwstacksiz:18,dwstrtype:18,dwthreadaffinitymask:18,dwthreadid:18,dwtype:18,dynam:7,e24a88fa88:12,e2b3c97f:12,eabuff:18,each:[1,8],ealength:18,earli:6,easi:12,eax:[3,8,12],ebp:[3,12],ebx:[3,8,12],echo:12,econtext32:[3,10],econtext64:[3,10],econtextwow64:[3,10],ecrypt_data_blob:12,ecx:[3,8,12],edi:[3,8,12],edit:17,edr7:3,edx:[3,8,12],eeflag:[3,12],eexception_debug_info32:[2,3],eexception_debug_info64:[2,3],eexception_point:3,eexception_record32:3,eexception_record64:3,eexception_record:3,eflag:[3,12],ehcertstor:12,eip:[3,12],element:1,elev:[9,12],elif:[],els:[2,9,12,19],emb:[5,19],embd:[1,12],embed:2,enabl:[5,9,10,12,14],enable_privileg:14,encod:[1,12],encount:7,encrypt:6,encryption_demo:12,end:[8,10,12],endswith:12,engizuyhxgvqzrdrhu4g4:12,enhanc:3,enough:18,entri:[5,10,12],enumer:12,enumservicesstatusexa:18,enumservicesstatusexw:18,enumwindow:18,environ:[10,12],equal:[9,18],errcheck:18,errno:12,error:[12,18,19],esec:0,esi:[3,8,12],esp:[3,8,12],establish:[9,12],eudc:12,even:17,event:[2,12],eventhandl:18,everi:[7,8,12],ewpxyxnoaw5ndg9umrawdgydvqqhewdszwrtb25kmr4whaydvqqkexvnawnyb3nv:12,ewrnt1bsmtqwmgydvqqfeysymjk4nzkrmtq3ndq5ymutmtvhoc00zwjhltkzzjmt:12,exampl:[5,6,7,8],exc:[2,12],exc_addr:12,exc_cod:12,except:[2,6,10,12,15,18],exception_access_viol:12,exception_breakpoint:12,exception_continue_execut:12,exception_single_step:12,exceptionaddress:[3,12],exceptioncod:[2,3,12],exceptionflag:3,exceptioninform:[3,12],exceptionrecord:[3,12],exe:[12,14],exec:[2,12],execut:[2,6,7,10,12,17],execute_64bits_code_from_syswow:7,execute_python:[10,12],execute_python_unsaf:10,exempl:18,exist:[7,12],exit:[2,5,10,12,14],exit_callback:5,exit_cod:[10,12],exit_process:2,exit_thread:2,exitprocess:18,exitthread:18,exp:12,expect:[0,2],expir:19,explan:19,explor:[6,9,15],export_directori:10,export_nam:10,expr:8,extendedregist:3,extract:[1,2,7,8,12],extract_argu:[2,12],f6f92166d7dd:12,f750e6c3:12,fail:[8,9,12,18],fake_modul:12,fals:[1,2,9,12,18],famili:8,far:7,fat32:12,fault:2,fault_addr:12,featur:[8,20],ff556253:14,fhandl:12,field:[3,7,8,10,11,13,19],file:[0,1,12,14,18,19],file_attribute_norm:18,file_h:12,file_map_all_access:18,fileattribut:18,filehandl:[12,18],filenam:[1,10,12,19],filesystem:[12,14],filetyp:12,finaluncompresseds:18,find:12,firewal:[0,12,15],firewallrul:9,first:[5,12,18],firsthandl:18,fixedinteractiveconsol:12,flag:[1,3,12,13,18],flallocationtyp:18,flnewprotect:18,floatsav:3,flprotect:18,follow:[2,7,12],font:12,force_bit:10,forcibl:12,form:2,format:[5,8,12,17,18],forward:8,found:[8,12],free:10,freeconsol:18,freespac:12,frm:21,from:[0,1,2,5,7,8,10,12,21],from_address:12,from_buff:[1,12],from_fil:[1,12],from_str:12,from_system_stor:[1,12],ftype:7,full:10,full_signature_inform:[12,19],fullnam:[10,12],func:12,func_getprocaddress32:8,func_getprocaddress64:8,func_nam:[12,18],func_result:[3,12],func_strlena32:8,func_strlena64:8,func_strlenw32:8,func_strlenw64:8,functionbp:2,gate:6,gdef:12,gdi32:12,gdiplu:12,gdiplus_6595b64144ccf1df_1:12,gencrypt:12,gener:[0,5,6,7,8,12],generate_pfx:12,generate_selfsigned_certif:12,generate_syswow64_cal:7,generated_def:[0,10,12,13,18],generateinitvector:1,generic_read:18,geninitvector:1,genkei:[1,12],genkeyspars:12,genuineintel:8,get:[0,2,10,11,12,14],get_cert:[1,12],get_cod:[8,12],get_exception_bit:2,get_exception_cod:[2,12],get_exception_context:[2,12],get_firewallen:12,get_handle_from_fil:14,get_mapped_filenam:10,get_memory_breakpoint_at:2,get_nam:1,get_optionalhead:12,get_proc_family_model:8,get_signer_certif:[1,12],get_signer_data:[1,12],get_vendor_id:8,getattr:12,getcomputernamea:18,getcomputernamew:18,getcurrentprocess:18,getcurrentprocessornumb:18,getcurrentthread:18,getcurrentthreadid:18,getcursorpo:18,getdrivetypea:18,getdrivetypew:18,getexitcodeprocess:18,getexitcodethread:18,getextendedtcpt:18,getfileversioninfoa:18,getfileversioninfosizea:18,getfileversioninfosizew:18,getfileversioninfow:18,getift:18,getinterfaceinfo:18,getipaddrt:18,getlasterror:18,getlogicaldrivestringsa:18,getlogicaldrivestringsw:18,getlongpathnamea:18,getmappedfilenameawrapp:18,getmappedfilenamewwrapp:18,getmodulebasenameawrapp:18,getmodulebasenamewwrapp:18,getnamedsecurityinfoa:18,getnamedsecurityinfow:18,getpeernam:12,getpefil:10,getprocaddress32:8,getprocaddress64:8,getprocaddress:18,getprocessdeppolici:18,getprocessid:18,getprocessimagefilenameawrapp:18,getprocessimagefilenamewwrapp:18,getprocesstim:18,getsecurityinfo:18,getshortpathnamea:18,getsidsubauthor:18,getsidsubauthoritycount:18,getstdhandl:18,getsystemmetr:18,getthreadcontext:18,getthreadid:18,gettokeninform:18,getversionexa:18,getversionexw:18,getvolumeinformationa:18,getvolumeinformationw:18,getvolumenameforvolumemountpointa:18,getvolumenameforvolumemountpointw:18,getwindowmodulefilenamea:18,getwindowmodulefilenamew:18,getwindowrect:18,getwindowtexta:18,getwindowtextw:18,ggegtt4pwpqg8ch0jnrkl1fb3kzz7e34:12,github:0,give:5,given:[2,12,18],goal:[1,7,12],got:12,group:[9,15],guess:11,gui:14,h1cki4tgezqzceunpnwv6dmuvpciqgeia5phojzyenknd0sx6eqzrynuz1gmn:12,hack:[3,7],had:1,hadditionalstor:18,hakril:12,hand:8,handl:[2,6,7,8,10,12,14,15,17,18],handle_addr:12,handle_valu:12,handler:[3,12,18],handlerroutin:18,hanld:17,harddisk0:12,harddiskvolume2:12,hardwar:[2,14],hardware_exec_bp:2,has:[2,12,18],hasattr:12,hashalgorithm:12,hashlib:12,have:[0,2,3,5,7,10,12,18,19],haven:1,hcatadmin:18,hcatinfo:18,hcertstor:18,hchainengin:18,hcryptkei:[1,12],hcryptmsg:18,hcryptprov:[12,18],hcryptprovorncryptkei:18,hdevic:18,heaven:6,heavili:18,hello:12,help:[12,17,18],helper:6,here:[7,12,18,20],hex:12,hexdigest:12,hexdump:12,hexpkei:18,hfile:18,hfilemappingobject:18,hhandl:18,hidden:7,hit:2,hkei:[12,18],hkey_current_us:12,hkey_local_machin:12,hmem:18,hmht7km6g8lsmfiga1udeqrlmemkrzbfmq0wcwydvqql:12,hmodul:18,hobject:18,hold:12,hook:[6,10],horribl:[3,7],host:12,hostnam:9,hprocess:18,hprov:18,hscmanag:18,hsnapshot:18,hsourcehandl:18,hsourceprocesshandl:18,hstore:[1,18],htargetprocesshandl:18,htemplatefil:[5,18],hthread:18,http:[0,1,2,12,14],hwnd:18,hxbp:12,hxbreakpoint:[2,12],iat:[6,10],iat_create_fil:5,iat_entri:5,iat_hook:12,iatentri:[5,12,14,15],iathook:[5,10],ident:12,identif:9,iid:12,imagepath:[10,12],imagepathnam:10,imm32:12,immedi:8,imp:5,implement:[2,6],import_pfx:12,importerror:12,in073czyitg7mvhbexbofhgncixoufeyhwy1pygjousqsqzs4bj:12,inc:12,includ:8,increment:1,index:[1,6,8],indic:8,inetfwpolicy2:[0,6],infinit:[10,12,18],infitin:12,info:[4,12,15],infolevel:18,inform:[1,7,10,12,19],inherit:7,init:12,init_breakpoint:12,initi:1,initial_cod:12,initialis:12,initvector:1,inject:[12,14],inmessageattribut:18,input_buffer_port:8,input_buffer_s:8,input_buffer_valu:8,instal:17,installd:12,instanc:[0,12],instr:[8,12],instruct:[8,12],int3:2,integr:10,interact:12,interativeconsol:14,interest:2,interfac:[2,6,9,12,17],interface_typ:9,intern:[1,6],invalid:19,io_stack_input_buff:8,io_stack_input_buffer_len:8,iopl_1:3,iopl_2:3,iostatusblock:18,iphlpapierror:18,ipv4:[9,12],ipv6:9,is_amd_proc:8,is_elev:10,is_exit:10,is_intel_proc:8,is_process_32_bit:14,is_sign:[12,19],is_workst:17,is_wow_64:[10,12],issuer:[1,12],item:[11,12],its:[0,2,10],itself:19,jmp:[8,12],jnz:8,join:12,ju6ih:12,jump:[7,8],just:[5,7,8],k32:12,k32pe:12,k9dctgaoymff6qukabqidaqab:12,keep:[5,7,10],kei:[1,10,11,12],kernel32:[5,12],kernel32_error_check:[12,18],kernel32error:[1,12,18],kernel:[10,14],kernelbas:12,key_info:[1,12],key_read:11,keyboard:12,keypair:1,keyprovinfo:12,keytyp:1,keyvalu:[12,15],keyword:18,khiu4to5jf25xthf2g:12,kill:12,killonexit:18,knockin:7,know:[2,7,17,18,19],known:[2,5],kwarg:12,kwd:[2,10],l2ec6cyjdqc6hcqbncsbjvq6qgtqbyn:12,l2nlcnrzl01py1dpblbyb1bdqtiwmtffmjaxms0xmc0xos5jcnqwdaydvr0taqh:12,l56:0,lab:0,label:[8,12],lait:12,last:[5,12,18],lastbranchfromrip:3,lastbranchtorip:3,lastexceptionfromrip:3,lastexceptiontorip:3,layout:12,ldr:12,ldrloaddll:[12,18],ldrloaddll_32_to_64:7,left:1,len0:3,len1:3,len2:3,len3:3,len:[12,18],length:[10,18],let:12,level:10,librari:[1,2,10,12,14],like:[7,14],line:[12,18],linebuf:12,linkhandl:18,linktarget:18,list:[1,3,5,8,9,10,11,12,17,21],listen:[9,12],lkd:0,load:[2,6,12,15,18],load_dll:2,load_librari:10,loadedmodul:[12,15],loadlibrari:8,loadlibrarya:18,loadlibraryw:18,local:[4,9,10],local_addr:9,local_address:9,local_debugg:12,local_debugger_remote_process:12,local_handl:4,local_port:[9,12],localdebugg:6,localfre:18,localhost:12,logic:[6,12,15,17],logicaldr:[12,16,17],look:[5,12],lookupaccountsida:18,lookupaccountsidw:18,lookupprivilegevaluea:18,lookupprivilegevaluew:18,loop:[2,12],lower:12,lpaddress:18,lpapplicationnam:18,lparam:18,lpbaseaddress:18,lpbasenam:18,lpbuffer:18,lpbytesreturn:18,lpcbdata:18,lpcommandlin:18,lpcontext:18,lpcreationtim:18,lpcurrentdirectori:18,lpdata:18,lpdatabasenam:18,lpdebugev:18,lpdevicenam:18,lpdirectori:18,lpdwhandl:18,lpenumfunc:18,lpenviron:18,lpexitcod:18,lpexittim:18,lpfile:18,lpfilemappingattribut:18,lpfilenam:[5,18],lpfilesystemflag:18,lpfilesystemnamebuff:18,lpflag:18,lpfloldprotect:18,lpimagefilenam:18,lpinbuff:18,lpkerneltim:18,lplpbuffer:18,lpluid:18,lpmachinenam:18,lpmaximumcomponentlength:18,lpname:18,lpnsize:18,lpnumberofbytesread:18,lpnumberofbyteswritten:18,lpoper:18,lpoutbuff:18,lpoverlap:18,lpparamet:[10,18],lpperman:18,lppoint:18,lpprocessattribut:18,lpprocessinform:18,lpprocnam:18,lprect:18,lpreferenceddomainnam:18,lpreserv:18,lpresumehandl:18,lprootpathnam:18,lpsecurityattribut:[5,18],lpservic:18,lpservicesreturn:18,lpsid:18,lpstartaddress:[10,18],lpstartupinfo:18,lpstring1:18,lpstring2:18,lpstring:18,lpsubblock:18,lpsubkei:[12,18],lpsystemnam:18,lpszlongpath:18,lpszprivileg:14,lpszshortpath:18,lpszstoreprovid:18,lpszstructtyp:18,lpszvolumemountpoint:18,lpszvolumenam:18,lptargethandl:18,lptargetpath:18,lpte:18,lpthreadattribut:18,lpthreadid:18,lptstrfilenam:18,lptype:18,lpusertim:18,lpv:18,lpvalu:18,lpvaluenam:18,lpversioninform:18,lpvolumenamebuff:18,lpvolumeserialnumb:18,lsa_unicode_str:10,lstrcmpa:18,lstrcmpw:18,machin:8,made:7,magic:[5,7,12],mai:[7,8],main:1,major:17,make:[2,5,6,15],manag:[1,2,6,10],mandatori:18,mani:15,manual:12,manuali:5,map:[2,10,11],mape:9,mapviewoffil:18,mask:9,match:12,maximumlength:10,mayb:12,mean:[2,7,10,18],mem:[8,12],mem_access:8,mem_commit:18,mem_releas:18,membp:2,memori:[1,2,7,8,10,12],memory_basic_inform:10,memory_breakpoint:2,memory_st:10,memorybreakpoint:[2,12],memoryinform:18,memoryinformationclass:18,memoryinformationlength:18,messag:[1,12],metavar:12,method:[0,1,2,7,12],microsoft:[1,2,12,14],might:[2,3,7,9,13,17,20],miifbdcca:12,minor:17,mismatch:8,miss:18,mnemon:8,mode:[7,8,14],model:[6,8],modul:[0,1,3,5,6,7,8,10,12,18,19],module_to_trac:12,modulefilenam:18,modulehandl:18,more:[10,12,19],most:[3,12,18],mov:[8,12],ms679286:2,ms679287:2,ms679334:2,ms679335:2,ms680351:2,ms680545:2,ms680587:2,ms681403:2,msctf:12,msdn:[1,2,12,14],msg:1,msvcr90:12,msxml6:12,mteymdm5mzfafw0xodaxmteymdm5mzfamhaxczajbgnvbaytalvtmrmweqydvqqi:12,much:2,mui:12,multipleinstr:[8,12],must:[2,5,7,10,12,18],mxcsr:3,my_ex:5,my_fail_kei:12,my_secret_kei:12,mydebugg:12,myfunctionbp:12,myinterfac:0,mykei:12,mypassword:12,name:[1,3,4,5,7,8,9,10,11,12,13,16,17],name_valu:12,nametyp:1,narg:12,nativ:[0,6,10,17],native_cod:12,native_exec:[6,7,12,17],nativeutil:6,nb_cert:[1,12],nb_repeat:12,nb_signer:[1,12],nbufferlength:18,need:[0,5,7,12,18],neededparamat:18,neededparamet:18,neg:12,net_fw_action_:9,net_fw_action_allow:9,net_fw_action_block:9,net_fw_profile2_domain:[9,12],net_fw_profile2_priv:[9,12],net_fw_profile2_publ:[9,12],net_fw_profile_type2_:9,net_fw_rule_dir_in:9,net_fw_rule_dir_out:9,net_fw_rule_direction_:9,netfwpolicy2clsid:12,network:[0,6,15,17],new_align:3,new_in_memori:[1,12],new_protect:14,newaccessprotect:18,newli:12,newstat:18,nfilesystemnames:18,nfunc:12,nice:10,ninbuffers:18,nindex:18,nmaxcount:18,nnumberofbytestoread:18,nnumberofbytestowrit:18,non:[2,8,12],none:[1,2,3,5,8,10,11,12,13,14,18,21],nop:12,normal:[3,12],note:1,notepad:12,noth:[18,20],noumex:14,noutbuffers:18,now:[1,2,7,11,12,20],now_valu:12,nshowcmd:18,nsize:18,nstdhandl:18,nsubauthor:18,ntalpcacceptconnectport:18,ntalpcconnectport:18,ntalpcconnectportex:18,ntalpccreateport:18,ntalpcsendwaitreceiveport:18,ntcreatefil:[12,18],ntcreatefile_iat:12,ntcreatethreadex:18,ntcreatethreadex_32_to_64:7,ntdll:[7,12],ntf:12,ntgetcontextthread:18,ntgetcontextthread_32_to_64:7,ntopendirectoryobject:18,ntopenev:18,ntopensymboliclinkobject:18,ntprotectvirtualmemori:18,ntquerydirectoryobject:18,ntqueryinformationprocess:18,ntqueryinformationprocess_32_to_64:7,ntqueryinformationthread:18,ntqueryinformationthread_32_to_64:7,ntqueryobject:18,ntquerysymboliclinkobject:18,ntquerysysteminform:18,ntqueryvirtualmemori:18,ntqueryvirtualmemory_32_to_64:7,ntsetcontextthread:18,ntsetcontextthread_32_to_64:7,ntwow64readvirtualmemory64:18,ntwow64writevirtualmemory64:18,number:[1,5,7,8,11,13,19],numberofbytestoprotect:18,numberparamet:3,nvolumenames:18,nwashington1:12,nyolocertif:12,o4ibgdccaxwwhwydvr0lbbgwfgykkwybbagcnwodbgyikwybbquhawmwhqydvr0o:12,object:[1,6,7,8,10,12,13,21],objectattribut:[12,18],objectinform:18,objectinformationclass:18,objectinformationlength:18,objectnam:12,objecttyp:18,occur:2,offer:[1,17,19],offset:[2,7,12],old:[10,14],old_protect:10,oldaccessprotect:18,oldvalu:18,ole32:12,oleacc:12,oleaut32:12,on_create_process:2,on_create_thread:2,on_except:[2,12],on_exit_process:2,on_exit_thread:2,on_load_dl:2,on_output_debug_str:2,on_rip:2,on_single_step:[2,12],on_unload_dl:2,onc:7,one:[1,2,7,10,12,13],ones:3,onli:[0,2,7,8,10,11,12],open:[5,11,12],open_exist:18,open_reg_hook:12,open_subkei:11,openasself:18,openeventa:18,openeventw:18,openkei:12,openprocess:18,openprocesstoken:18,openscmanagera:18,openscmanagerw:18,openthread:18,openthreadtoken:18,oper:[7,8,14],operand:8,ord:[10,12],order:[5,8],ordereddict:2,ordin:[10,12,18],origin:2,originali:5,osnam:12,other:[2,5,7],ouput:12,our:[7,12],our_connect:12,ourself:12,out:[1,8],out_2_or_4:8,out_4:8,out_ioctl:8,outmessageattribut:18,outnam:12,output:12,own:10,owner:[10,12],p1home:3,p2home:3,p3home:3,p4home:3,p5home:3,p6home:3,package_35_for_kb3128650:12,page:[2,6,10,12],page_execute_readwrit:[10,12,14,18],page_noaccess:12,page_readwrit:[12,18],pain:7,pair:12,panel:12,param:[2,10,12],param_nam:18,paramet:[2,5,7,8,10,18],parent:10,pars:[6,7,8,15],parse_arg:12,parser:12,part:[7,15,19],partition2:12,pass:[0,2,3,5,7,18],password:[1,12,21],path:[2,10,12,14,16],pathnam:12,pathtofil:18,pauthlist:18,pbcertencod:18,pbdata:[12,18],pbdecrypt:18,pbencod:18,pbencryptedblob:18,pbhash:18,pblock:18,pbtobeencrypt:18,pca:12,pcbbytesneed:18,pcbdata:18,pcbdecrypt:18,pcbencod:18,pcbencryptedblob:18,pcbhash:18,pcbstructinfo:18,pccert_context:1,pcert:18,pcertcontext:18,pcertid1:18,pcertid2:18,pchainpara:18,pdecryptpara:18,pdwcontenttyp:18,pdwdatalen:18,pdwformattyp:18,pdwkeyspec:18,pdwmsgandcertencodingtyp:18,pdwsize:18,pdwtype:18,pe_pars:[5,12,15],peb:[5,6,7,15],peb_addr:[7,10],peb_syswow:10,pefil:[6,12,15],pencodepara:18,pencryptpara:18,pendtim:18,perform:[2,5,7,8,17,21],perform_cal:[12,18],pesect:12,peus:18,pextens:18,pfcallerfreeprovorncryptkei:18,pfw_tmp_key_contain:12,pfx:[1,12],pfxexportcertstoreex:18,pfxfile:12,pfximportcertstor:[12,18],pfxpassword:12,pgactionid:18,pgsubsystem:18,phcatadmin:18,phcertstor:18,phcryptprovorncryptkei:18,phkei:18,phkresult:[12,18],phmsg:18,phprevcatinfo:18,phprov:18,pid:[10,12],piftabl:18,pipaddrt:18,pkcs12_no_persist_kei:1,pkeyprovinfo:18,place:19,plai:[3,12],plu:5,pobjectnam:18,poc:12,point:[1,18],pointer:[1,7,15],pop:[8,14],pop_calc_32:12,pop_calc_64:[12,14],pop_shel:14,port:[8,9,12],portattribut:18,portcontext:18,porthandl:18,portnam:18,possess:4,possibl:[0,7,17],post:12,pouet:[],ppchaincontext:18,ppdacl:18,ppfx:[12,18],ppid:[10,12],pprevcertcontext:18,pprint:12,ppsacl:18,ppsecuritydescriptor:18,ppsidgroup:18,ppsidown:18,ppstorecontext:18,ppszerror:18,ppv:18,ppvcontext:18,ppxchgcert:18,prefix:[3,8],present:[7,10],preserved1:18,preserved3:18,pretti:7,prevent:10,previousst:18,print:[3,5,8,12],printer:12,printunicodestr:12,privat:12,privileg:14,pro:12,problabl:1,problem:7,proc:12,process32first:18,process32next:18,process:[2,6,7,8,9,13,14,15,17,18],process_all_access:18,processhandl:18,processid:12,processinform:18,processinformationclass:18,processinformationlength:18,processor:7,product:[12,17],product_typ:[12,17],profession:17,profil:[9,12],prog:12,program:3,progress:6,project:[0,8],properti:1,prot:10,protect:[1,10,12,14],protocol:[6,9,10],prov:[1,12],prov_rsa_ful:12,provid:[1,8,14,18],proxi:18,pscatinfo:18,psecdesc:18,psid:18,psignaturealgorithm:18,pstarttim:18,psubjectissuerblob:18,pszcontain:[1,18],pszfilenam:18,pszgroupnam:18,psznamestr:18,pszobjid:12,pszprovid:[1,18],pszx500:18,ptcprow:18,ptcptabl:18,ptime:18,ptr:10,pulen:18,punkout:18,purpos:8,push:[8,12],put:[2,6],pvdata:18,pvencod:18,pvfindpara:18,pvobject:18,pvoid:[12,14],pvpara:18,pvparamet:18,pvreserv:18,pvstructinfo:18,pvtypepara:18,pwszcontainernam:12,pwszprovnam:12,pwvtdata:18,pycod:10,pyhkei:[12,15],python27:12,python32:12,python64:12,python:[0,3,7,8,10,12,14,17],python_cod:12,python_execut:12,pythondll_modul:12,pythonforwindow:[0,7,12],pythonforwindowstmpcontain:12,pythont:18,pythonxx:12,qhsszio1k5n1udlpfwtn29buglsrttxpv5ocfntlo:12,queri:10,query_memori:10,querydosdevicea:18,querydosdevicew:18,queryworkingsetexwrapp:18,queryworkingsetwrapp:18,question:12,quit:[5,7],qword:[7,10],r10:[3,12],r11:[3,12],r12:[3,12],r13:[3,8,12],r14:[3,12],r15:[3,12],rais:[1,10,12,18],randint:8,random:[1,8],rang:12,raw64:[],raw:[1,3,8,12],raw_cert:12,raw_seri:[1,12],rax:[3,8,12],rbp:[3,12],rbx:[3,12],rclsid:18,rcx:[3,12],rdata:12,rdi:[3,12],rdx:[3,12],read:[1,2,7,10,11,12],read_byt:10,read_dword:10,read_memori:[7,10,12],read_memory_into:10,read_ptr:[10,12],read_qword:10,read_short:10,read_str:10,read_wstr:[10,12],readfil:18,readprocessmemori:18,real:[1,2,5],real_funct:[5,12],receivemessag:18,receivemessageattribut:18,recent:[12,18],record:15,redirect:[5,14],refcount:1,refer:[5,10],reg:[3,12],reg_nam:3,regclosekei:18,reggetvaluea:18,reggetvaluew:18,regist:[3,7,8,12],register_start:12,registered_own:12,registeredown:12,registri:[6,15,17],regopenkeyexa:[12,18],regopenkeyexa_iat:12,regopenkeyexacallback:12,regopenkeyexw:18,regqueryvalueexa:18,regqueryvalueexw:18,regroup:3,reject:19,relat:[6,15],releas:12,reli:[7,18],reloc:12,remot:[0,2,7,9,10],remote_addr:[9,12],remote_address:9,remote_calc:[],remote_cod:12,remote_host:9,remote_port:[9,12],remote_process:12,remote_proto:9,remote_veh_segv:12,remotectyp:[6,10],remoteloadedmodul:12,remotemanualloadlibrai:8,remotepeb32:7,remotepeb64:7,remotepeb:[7,12],remotepythonerror:12,remotewinunicodestr:12,remov:10,remove_hook:10,removevectoredexceptionhandl:18,replac:[7,12],report_ctx_diff:12,repr:[8,12],repres:[1,2,5,7,8,10,15,17],represent:[1,10,12],req:8,request:[2,6,15,17],requir:[9,12],requiredbuffers:18,requiredserversid:18,res:12,res_15:3,res_1:3,res_3:3,res_5:3,reserv:18,reset:12,resolut:9,resolv:[8,10],respect:[5,12],restartscan:18,restor:[2,10,14],restore_all_memory_breakpoint:2,result:[2,7,8,10,12,18],resultat:3,resum:[10,12],resumethread:18,ret:[7,8,12],ret_trigg:[2,12],ret_valu:12,retriev:[0,1,7,11],retrycr:[1,12],returnedlength:18,returnlength:18,returnsingleentri:18,revers:7,rewrit:[7,12],rewritebreakpoint:12,rewrot:7,rgprecipientcert:18,rgprovparam:12,right:[2,10,20],riid:18,rip:[3,12],rip_info:2,rlxmnhc8jtgzk96czmdbpauuwdachnmtkiwqf6axzsbbwsekqejvdbygaocuiyh4:12,root:[12,17,19,21],root_stor:12,rsa:12,rsi:[3,12],rsp:[3,12],rsrc:12,rtldecompressbuff:18,rtype:10,rule:9,run:[12,13,17],rw0:3,rw1:3,rw2:3,rw3:3,rwx:[2,12],sad:2,safe:12,sai:12,sam:11,samdesir:[12,18],same:[3,5,8],sampl:[0,1,2,3,4,5,6,9,10,11,13,16,17,19,21],save:1,sbgna5cjtxqc7iyp9c7rxbmthv5bnftonsn6d9n8zu:12,sc_manager_all_access:18,scale:8,se_debug_nam:14,search:6,secret:[5,12],section:[12,15],secur:12,securityinfo:18,see:[0,1,2,3,4,5,7,8,9,10,11,12,13,16,17,19,21],seg:8,segc:3,segd:3,sege:3,segf:3,segfault:10,segg:3,segment:7,segss:3,select:[12,21],selector:7,self:[1,7,9,12,18],selfsign:1,send:12,sendmessag:18,sendmessageattribut:18,serial:[1,12],serv:12,server:17,serversecurityrequir:18,servic:[6,9,12,15,17],service_continue_pend:13,service_file_system_driv:13,service_interactive_process:13,service_kernel_driv:[12,13],service_nam:9,service_paus:13,service_pause_pend:13,service_run:[12,13],service_runs_in_system_process:13,service_start_pend:13,service_stop:13,service_stop_pend:13,service_win32_own_process:13,service_win32_share_process:[12,13],servicea:[12,13,17],servicestatu:[12,13],set:[10,11,12,18],set_context:[10,12],set_default:12,set_hook:[5,10,12],set_syswow_context:10,setattr:12,setconsolectrlhandl:18,setstdhandl:18,settcpentri:18,setthreadaffinitymask:18,setthreadcontext:18,settokeninform:18,setup:[2,5,7,10,12,17],setup_target_context:12,sha1:12,sha256:12,shareaccess:18,shell32:12,shellcod:8,shellexecutea:18,shellexecutew:18,should:[0,1,2],show_window:[2,14],sid:18,side:3,sign:[1,12,19],sign_info:12,signatur:[6,12],signature_algo:[1,12],signer:[1,12],signer_certif:[],simpl:[1,5,8,12],simple_x64:[6,7,12],simple_x86:[6,12],simpler:3,simpli:5,singl:2,single_step:[2,12],single_step_count:12,singlesteponwrit:12,singlesteppingdebugg:12,size:[2,7,8,10,12,14],sizeof:14,sizeofcod:12,sleep:12,socket:[6,9],softwar:12,softwaretyp:12,sofwar:12,sogeti:0,some:[1,2,5,7,8,10,12,14,17,18,20],some_export:12,someth:7,soon:2,sourc:[1,2,3,4,5,7,8,9,10,11,13,14,16,17,19,21],space:10,special:[7,18],specifi:12,split:12,src:12,stack:[3,7,12],stackoverflow:12,standard:[2,7,14],standard_bp:2,start:[10,12],start_addr:12,start_address:10,start_regist:12,start_valu:12,startswith:12,startup:12,state:[12,13,17],staticcach:12,statu:[12,13],stdin:18,stdout:14,step:2,still:20,still_act:10,storag:18,store:[1,12],store_const:12,store_nam:1,store_tru:12,str:[1,2,4,8,9,10,12,13,16,17],string:[1,2,7,8,10,12],stringsid:18,strip:12,strlen:8,strlena32:8,strlena64:8,strlenw32:8,strlenw64:8,struct:10,structur:[1,2,6,7,8,10,15],stub:7,stuff:[7,12],subclass:[2,9,16,17,18],subcommand:12,subject:1,subkei:[11,12],subkeys_nam:12,submodul:[8,17],subpars:12,success:8,support:1,sure:7,surkei:11,suspend:[10,12],suspendthread:18,svchost:12,sys:12,system32:[12,14],system:[1,4,6,7,9,10,13,15,16],systeminform:18,systeminformationclass:18,systeminformationlength:18,syswow64:[6,10,12,14],syswow64apiproxi:7,syswow:[10,14],szoid_nist_aes128_cbc:1,szoid_nist_aes192_cbc:1,szoid_nist_aes256_cbc:1,szoid_oiwsec_descbc:1,szoid_rsa_des_ede3_cbc:1,szoid_rsa_sha256rsa:12,szpassword:[12,18],tableclass:18,tagclsctx:18,tagcoinit:18,tagthreadentry32:10,take:[7,18],talk:7,target:[2,7,10,12,16,21],target_addr:12,target_fil:12,target_func:12,target_host:12,target_nam:12,target_pag:12,target_port:12,targetedbit:10,tcp4:9,tcp4connect:9,tcp6:9,tcp6connect:9,tcp:[9,12],tcp_table_owner_pid_al:18,teb:10,teb_bas:10,techniqu:5,tell:1,temporari:[1,3],termin:10,terminaison:12,terminateprocess:18,terminatethread:18,test:[2,12],test_cod:12,test_code_x64:12,test_code_x86:12,text:12,th32processid:18,thei:12,them:[2,7,15],themself:17,thi:[0,1,2,3,5,7,8,10,12,15,17,18],thing:[7,8,18],thisit:0,those:[2,3,5,7,8],thread32first:18,thread32next:18,thread:[2,6,12,15,17,18],thread_all_access:18,thread_exec:12,threadhandl:18,threadinform:18,threadinformationclass:18,threadinformationlength:18,three:0,through:15,tid:10,time:[1,10,12,18],time_info:10,timeinfo:10,timeout:[10,18],tmp:12,to_dump:3,todo:[4,17],token:15,tokenhandl:18,tokeninform:18,tokeninformationclass:18,tokeninformationlength:18,trace:12,traceback:[12,18],transform:[7,10],transform_type_to_remote32bit:7,transform_type_to_remote64bit:7,transpar:18,tri:18,trigger:[2,12],trivial:7,trust:[1,12],trust_e_nosignatur:12,try_generate_stub_target:7,tupl:3,two:[5,7,19],txt:[0,12],type:[1,2,3,4,7,8,9,10,11,12,13,16,17,21],typeerror:18,typenam:12,ucchmax:18,uexitcod:18,ugli:[7,20],ukvab:12,ulaf:18,ulong64:[7,10],ulopt:[12,18],ultra:20,uncompressedbuff:18,uncompressedbuffers:18,unicod:[9,10],unicode_string_addr:12,unknow:17,unknown1:18,unknown2:18,unknown:[12,18],unload_dl:2,unstabl:20,usabl:14,use:[0,1,2,3,5,7,8,12,17],used:[0,1,8,10,12],useful:[12,19],user:[10,12,21],usermodetim:12,usernam:10,using:[0,1,5,6,7,8],utf16:10,utf8:[],util:[6,10,12,17],uxthem:12,valid:[12,19],valu:[1,2,3,7,8,9,10,11,12,14,16,17,18],value_nam:11,valueerror:[8,10,12],vari:3,variabl:12,variant_bool:12,variou:[8,15,18],vector:[1,15],vectorcontrol:3,vectoredexcept:[2,3,6],vectoredhandl:18,vectorregist:3,veh:12,veh_segv:12,vendorid:8,ver_nt_domain_control:17,ver_nt_serv:17,ver_nt_workst:[12,17],verif:12,verifi:12,verqueryvaluea:18,verqueryvaluew:18,version:[7,12,17],version_nam:[12,17],via:[8,10,12],view:3,vif:3,vip:3,virtual_alloc:[10,12],virtual_fre:10,virtual_protect:[2,10],virtualalloc:[6,12],virtualallocex:18,virtualfre:18,virtualfreeex:18,virtualprotect:[10,12,18],virtualprotectex:18,virtualqueryex:18,vista:17,vol:12,volatil:12,volum:[6,15,17],vsvmktr:12,vtabl:0,vtbtmfegccsgaqufbzachkvodhrwoi8vd3d3lm1py3jvc29mdc5jb20vcgtpb3bz:12,wai:[0,2,5,12],wait:[10,12],waitfordebugev:18,waitforsingleobject:18,want:7,wchvemxqxk5eofne6yekuarbgbmnwltfrpwklmvtnl9r:12,whatev:0,when:[0,2,7,10],where:[2,7],which:[2,3,9],whole:10,wide:8,win32:2,win32_logicaldisk:12,win32_process:12,wincfunc:7,windef:[12,14],window:[3,4,6,7,9,11,13,16,21],windowfrompoint:18,windows_info:12,windowscert:12,windowserror:[12,18],windowsvers:12,winerror:1,winfunc:[12,18],winmm:12,winobject:[0,2,3,4,7,9,10,11,12,13,16,17,21],winoject:12,winprocess:[2,4,7,13,15,17],winproxi:[2,6,7,12,14,17],winstruct:[10,12,13],winsx:12,winthread:[12,15,17],wintrust:6,winunicodestr:[10,12],winverifytrust:18,without:[2,5,12,18],wmi:[0,6,15,17],wmi_request:12,wmirequest:[12,17,21],won:2,word:10,work:[6,7,10,12],workaround:3,would:12,wow64disablewow64fsredirect:18,wow64enablewow64fsredirect:18,wow64fsenableredirect:18,wow64getthreadcontext:18,wow64revertwow64fsredirect:18,wow64setthreadcontext:18,wrap:14,wrapper:[1,7,11,14,18,19],write:[0,1,2,10,12],write_byt:10,write_code_in_target:12,write_dword:10,write_memori:[10,12],write_qword:10,write_short:10,writefil:18,writeprocessmemori:18,wrote:12,wstring:8,wstring_addr:12,wvalu:12,x000:12,x001:12,x00:[8,12],x00u:8,x010:12,x01:[8,12],x01t:12,x02:[8,12],x02us1:12,x03:[8,12],x03u:12,x040:12,x04:[8,12],x04f:8,x05:12,x05y:12,x06:12,x07:12,x07redmond1:12,x08:[8,12],x0b0:12,x0c:[8,12],x0e:12,x100:12,x10:[8,12],x10w:12,x11:[8,12],x11u:12,x12x:12,x130:12,x133:12,x13:12,x14:12,x14f:12,x151:12,x15microsoft:12,x17:12,x18:12,x19:12,x1am:12,x1av:12,x1b:12,x1c:12,x1e0:12,x1f:12,x64:[6,7,12,17],x64_cpuid:8,x7f:12,x80:[8,12],x80v:12,x81:[8,12],x82:12,x841:12,x84:8,x84qy:12,x86:[6,12],x86_cpuid:8,x86_microsoft:12,x86cpuidresult:8,x86h:12,x870:12,x89:[8,12],x8b:8,x8ba:8,x8bn:8,x8bq:8,x8c:12,x8ez:12,x90:12,x91:12,x93:12,x94:12,x977:8,x99cea:12,xa0:12,xa2d:12,xa4:12,xa6:12,xa6uo:12,xaahpj:12,xaam:12,xabnzr:12,xabo:12,xac:12,xad:12,xaf:12,xb2:12,xb3:12,xb8:12,xb9:12,xb9k:12,xbb:12,xbbybpu6:12,xbc:12,xc0:[8,12],xc0bbbb:8,xc2:12,xc2rg:12,xc30:12,xc3:8,xc6:12,xc7:8,xc8:12,xca:12,xcc:12,xcctv:12,xcd:12,xce:12,xd0z:12,xd1n:12,xd2m:12,xd4:12,xd4j:12,xd8:8,xd8t:12,xd9:12,xdc:12,xe0lwf:12,xe1:12,xe3:12,xe5:12,xe7:12,xe8:[8,12],xe9:12,xeb:8,xec:12,xeckk:12,xed9:12,xed:12,xedf:12,xee:8,xef1:8,xef:8,xf2:12,xf3:12,xf5:12,xf7:12,xf8:[8,12],xf9:[8,12],xfal:12,xfd:12,xfe:8,xor:8,y3jsl01py1dpblbyb1bdqtiwmtffmjaxms0xmc0xos5jcmwwyqyikwybbquhaqe:12,yaeno:12,yet:1,ygawibagitmwaaaqzuwyxemckydgaaaaabbjanbgkqhkig9w0baqsf:12,yield:10,yolocertif:12,yolohxbp:12,yop:12,you:[0,2,3,5,10,12,17],your:[0,3,5,8],yourself:0,yun:12,z5pmuf8va9tmfqg:12,zdexmge1yzq1ntuymb8ga1udiwqymbaafkkpajmofssxem2q:12,znqgq29ycg9yyxrpb24xgjaybgnvbamteu1py3jvc29mdcbxaw5kb3dzmiibijan:12},titles:["8. <code class=\"docutils literal\"><span class=\"pre\">windows.com</span></code> - Component Object Model","9. <code class=\"docutils literal\"><span class=\"pre\">windows.crypto</span></code> &#8211; CryptoAPI","7. <code class=\"docutils literal\"><span class=\"pre\">windows.debug</span></code> &#8211; Debugging","2.4. Exception and Context related structures","2.10. Handle &#8211; Processes handles","10. IAT hooking","Welcome to PythonForWindows&#8217;s documentation!","12. Internals","3. <code class=\"docutils literal\"><span class=\"pre\">windows.native_exec</span></code> &#8211; Native Code Execution","2.6. Network","2.1. Processes and Threads","2.5. Registry","13. Samples of code","2.7. Service","5. <code class=\"docutils literal\"><span class=\"pre\">windows.utils</span></code> &#8211; Windows Utilities","2. The <code class=\"docutils literal\"><span class=\"pre\">windows</span></code> objects","2.8. Volume &#8211; The logical drives","1. The <code class=\"docutils literal\"><span class=\"pre\">windows</span></code> module","4. <code class=\"docutils literal\"><span class=\"pre\">windows.winproxy</span></code> &#8211; Windows API","6. <code class=\"docutils literal\"><span class=\"pre\">windows.wintrust</span></code> &#8211; Checking signature","11. Early Work In Progress","2.9. WMI &#8211; Make request to WMI"],titleterms:{"function":[8,14,18],The:[15,16,17],Using:0,api:[18,19],argument:5,assembl:8,breakpoint:2,callback:5,certif:[1,12],certificatecontext:1,check:19,code:[8,12],com:[0,12],compon:[0,1],connect:9,context:[3,14],cpuid:8,cross:7,cryptcontext:1,crypto:[1,12],cryptoapi:1,cryptobject:1,current:12,current_process:12,currentprocess:10,currentthread:10,debug:[2,3,12],debugg:[2,12],decrypt:1,demo:12,disablewow64fsredirect:14,document:6,drive:16,earli:20,ehcertstor:1,encrypt:[1,12],exampl:18,except:3,execut:8,explor:[10,12],firewal:9,functionbp:12,gate:7,gener:1,generate_kei:1,generate_pfx:1,generate_selfsigned_certif:1,handl:4,heaven:7,helper:14,hook:[5,12],iat:[5,12],iatentri:10,implement:0,import_pfx:1,indic:6,inetfwpolicy2:12,info:3,inform:5,interfac:[0,8],intern:7,keyvalu:11,load:10,loadedmodul:10,local:12,localdebugg:[2,12],logic:16,make:[12,21],manag:14,model:0,modul:17,nativ:[8,12],native_exec:8,nativeutil:8,network:[9,12],object:[0,15,17],pars:10,pe_pars:10,peb:[10,12],pefil:10,pointer:3,process:[4,10,12],progress:20,protocol:5,put:5,pyhkei:11,pythonforwindow:6,record:3,registri:[11,12],relat:3,remot:12,remotectyp:7,request:[12,21],sampl:12,servic:13,signatur:19,signaturedata:19,simple_x64:8,simple_x86:8,singl:12,socket:12,step:12,structur:3,system:[12,17],syswow64:7,tabl:6,tester:12,testeur:[],thread:10,token:10,type:5,using:12,util:[8,14],vector:3,vectoredexcept:12,virtualalloc:18,virtualprotect:14,volum:16,welcom:6,window:[0,1,2,5,8,10,12,14,15,17,18,19],winprocess:[10,12],winproxi:18,winthread:10,wintrust:[12,19],wmi:[12,21],work:20,x64:8,x86:8}})