Create a new :class:`MessageAttribute` with the following attributes allocated: - :class:`ALPC_MESSAGE_SECURITY_ATTRIBUTE` -

Default ``Release`` implementation that returns ``1``

raise if request_type == RESPONSE_TYPE_FAIL

Replace compound attributes corresponding to bitfields with separate sub-fields.

Creates a X86 memory access description

Restore all pages to their original access rights. If target is ``None``, use ``current_process`` :return: a mapping of all dis

Performs a CPUID for the current process bitness :rtype: :class:`X86CpuidResult`

Dump all the PE header information into a dictionary.

Execute some native code in the context of the process :return: The thread executing the code :rtype: :class:`WinThread` or :class:`D

Flush the trace

Return the full address of the pipe `addr`

shellcode must NOT end by a ret

Retrieve ``ACE`` number ``i`` :return: :class:`Ace`

Return a four byte string representing the double word value (little endian).

Return an eight byte string representing the quad-word value (little endian).

Return a two byte string representing the word value. (little endian).

Calculate and return the entropy for the section.

Get the MD5 hex-digest of the section's data.

Get the SHA-1 hex-digest of the section's data.

Get the SHA-256 hex-digest of the section's data.

Get the SHA-512 hex-digest of the section's data.

Return elements nb ``index``. Collection index starts at 1

The filename mapped at address ``addr`` or ``None`` :rtype: :class:`unicode` or ``None``

Retrieve the subject or issuer name of the certificate. See `CertGetNameStringA <https://msdn.microsoft.com/en-us/library/windows/desktop/aa37

Get the offset of data appended to the file and not contained within the area described in the headers.

Convert eight bytes of data to a word (little endian) 'offset' is assumed to index into a word array. So setting it to N will return

Get the RVA corresponding to this file offset.

Checks if the PE file has relocation directory

Return ``True`` if ``attribute`` is allocated