Add icon helper

Returns true if original missing IATs will be rebuilt (only if IATs are saved)

Returns advanced debug information type

Returns cursor data by ID and language (minimum checks of format correctness)

Returns IAT entry VA (usable if image has both IAT and original IAT and is bound)

Returns TLS index RVA

Returns subsystem value

Returns debug datetimestamp

Returns true if image has import directory

Simple relocations rebuilder To keep PE file working, don't remove any of existing relocations in relocation_table_list returned by a call to get_relo

Resources rebuilder resource_directory - root resource directory resources_section - section where resource directory will be placed (must be attached

Returns true if Original import address and import address tables will not be rebuilt, works only if import descriptor IAT (and orig.IAT, if present)

Returns corresponding section data pointer from VA inside section "s" for PE32 (checks bounds)

Sets IAT entry VA (usable if image has both IAT and original IAT and is bound)

Strips only zero DATA_DIRECTORY entries to count = min_count Returns resulting number of data directories strip_iat_directory - if true, even not empt

r""" Builds the name that will be used when exporting the model. :param epoch_num: Optional epoch number associated with the model

Add cursor helper

Adds SE Handler RVA to list

Checks if exported function name already exists

Checks if exported function name already exists

Returns age of build

Returns bitmap data by name and index in language directory (instead of language) (minimum checks of format correctness)

Returns flags

Returns VA of a list of addresses where the LOCK prefix is used

Returns major version

Returns message table data by ID and language

Returns minor version

Returns ordinal base

Returns RVA of relocation

Returns size of debug data (internal, .pdb or other file doesn't count)

Returns size of image

Returns true if image has export directory

Returns true if image has relocations

Returns true if image has resource directory

Destroys included data

Removes cursor group and all its cursors by name/ID and language

Removes icon group and all its icons by name/ID and language

Returns true if resource type exists

Sets advanced debug information

Sets file alignment

Sets start RVA of TLS raw data

Sets RVA

Sets timestamp

Sets section virtual size

Strips MSVC stub overlay

r""" Calculate the generator loss on malware dataset

Adds bitmap from bitmap file data. If bitmap already exists, replaces it timestamp will be used for directories that will be added

Adds resource_data_entry

Adds resource_directory

Calculate checksum of image

Returns true if PE characteristics flag set

Returns cursor data by name and language (minimum checks of format correctness)

Returns DLL Characteristics

Returns icon data by ID and language (minimum checks of format correctness)

Returns image base for PE32

Returns name ordinal of function

Returns number of ID entries

Returns number of named entries

Returns original file name

Returns a pointer to a cookie that is used by Visual C++ or GS implementation

Returns size of zero fill

Returns full version information: file_version_info: versions and file info lang_string_values_map: map of version info strings with encodings transla

Returns true if image has debug directory

Returns true if image has exception directory

Returns true if function has name and name ordinal

Returns true if image has COM directory

Lists resource types existing in PE file (non-named only)

r""" Predict the labels for \p X :param X: Set of examples for which label probabilities should be predicted :return: Pre

Recalculates image base with the help of relocation tables

Recalculates end address of raw TLS data

RVA to RAW file offset convertion (4gb max)

Sets advanced debug information type, if no advanced info structure available

Sets offset from section start where import directory data will be placed

r""" Malware Generative Adversarial Network Constructor :param mal_data: Malware training dataset. :param ben_data: Benig

r""" Calculates the parameter :math:`L_{G}` as defined in Eq. (3) of Hu & Tan's paper. :param g_theta: :math:`G(_{\theta_g}(m,z)`

Helper function to delete old backed up models :param epoch_num: Epoch number associated with old backed up model

r""" Export the specified model to disk. The function creates any files needed on the path. All exported models will be relative to

Adds relocation to table

Adds resource_directory_entry

Adds COFF symbol

r""" Constructs loaders from the datasets :param batch_size: Batch size for training

Helper function to calculate needed space for resource data

Returns true if directory exists