Esempio n. 1
0
    def get_exported_dll_name(self, pe: pefile.PE) -> str:
        """Gets exported DLL name, if any
        @return: exported DLL name as string or None.
        """
        if not pe:
            return None

        if hasattr(pe, "DIRECTORY_ENTRY_EXPORT"):
            dllname = pe.get_string_at_rva(
                pe.DIRECTORY_ENTRY_EXPORT.struct.Name)
            return dllname.decode("latin-1")
        return None
Esempio n. 2
0
def read_struct(pe:pefile.PE, struct:pefile.Structure) -> bytes:
  return pe.get_string_at_rva(struct.OffsetToData, struct.Size)