def get_exported_dll_name(self, pe: pefile.PE) -> str: """Gets exported DLL name, if any @return: exported DLL name as string or None. """ if not pe: return None if hasattr(pe, "DIRECTORY_ENTRY_EXPORT"): dllname = pe.get_string_at_rva( pe.DIRECTORY_ENTRY_EXPORT.struct.Name) return dllname.decode("latin-1") return None
def read_struct(pe:pefile.PE, struct:pefile.Structure) -> bytes: return pe.get_string_at_rva(struct.OffsetToData, struct.Size)