Returns UNWIND_INFO structure version

Returns the maximum block size that can be allocated from heap segments, in bytes

Returns true if image has config directory

Returns true if image has overlay data at the end of file

Returns true if image has TLS directory

Returns true if image has console subsystem

Returns true if data type is exe name

Returns true if structure contains file name

Returns true if image has Windows GUI subsystem

Returns true if entry point is native

r""" Extracts the input data from disk and packages them into format expected by \p MalGAN. Supports loading files from numpy, torch, and p

Prepares section before attaching it

Realigns file (changes file alignment)

imports - bound imported modules list imports_section - section where export directory will be placed (must be attached to PE image) offset_from_secti

Removes bitmap by name/ID and language

Removes all resources of given type or root name If there's more than one directory entry of a given type, only the first one will be deleted (that's

Returns true if Original import address and import address tables contents will be rewritten works only if import descriptor IAT (and orig.IAT, if pre

Returns section and offset (raw data only) from its start from RVA

Sets TLS callbacks RVA

Sets characteristics

Sets DLL Characteristics

Sets entry name

Sets name of function (or clears it, if empty name is passed)

Sets ordinal base

Sets stub MSVS overlay

Sets subsystem value

Sets symbol name

Sets/replaces full version information: file_version_info: versions and file info lang_string_values_map: map of version info strings with encodings t

Sets section virtual address

Returns true if IMAGE_DIRECTORY_ENTRY_IAT must be zeroed, works only if auto_set_to_pe_headers = true

r""" Calculates the parameter :math:`L_{D}` as defined in Eq. (2) of Hu & Tan's paper. :param X: Examples to calculate the loss ov

r""" Parse the activation function from a string and return the corresponding activation function PyTorch module. If the activation functio

r""" Exports MalGAN results. :param model: MalGAN model :param valid_loss: Average loss on the malware validation set :param tes

r""" Firsts the blackbox detector using the specified malware and benign training sets. :param mal_train: Malware training dataset

r""" Trains a single entire epoch :param epoch_num: Epoch number :param g_optim: Generator optimizer :param d_op

Adds module reference

Adds translation to translation list

Returns true if PE headers should be updated automatically after rebuilding of imports

Returns true if the last section should be stripped automatically, if imports are inside it

Clears PE characteristics flag

Clears imported functions list

Sets if the last section should be stripped automatically, if imports are inside it, default true

Returns true if section is executable

Fills MSVC stub overlay with character c

Filters the returned imported functions of binary to remove those with special characters (lots of noise for some reason), and require func

Filters the returned imported functions of binary to remove those with special characters (lots of noise for some reason), and require func

r""" Fits the learner. Supports NumPy and PyTorch arrays as input. Returns a torch tensor as output. :param X: Examples

r""" Trains the model for the specified number of epochs. The epoch with the best validation loss is used as the final model.

Returns characteristics of directory

Returns characteristics

Returns resource codepage

Returns VA of edit list (reserved by system)

Returns file OS type

Returns file OS type (raw DWORD)

Returns file type

Returns file type (raw DWORD)

r""" Gets the enum item from the specified name :param name: Name of the enum object :return: Enum item assoc

Returns debug PDB 7.0 structure GUID

Returns heap size commit for PE32 and PE64 respectively

Returns heap size reserve for PE32 and PE64 respectively

Returns icon data by ID and index in language directory (instead of language) (minimum checks of format correctness)

Returns major version of directory

Returns major version number

Returns major version

Returns minor version of directory

Returns minor version number

Returns minor version

Returns nt headers data pointer

Returns number of functions

Returns number of function names

Returns PE signature

Returns RVA of code manager table

Returns RVA of export address table jumps