ImportsPlug.py 文件源码

def process(self):
        pelib = self._getLibrary(PEFileModule().getName())
        if(pelib is None):
            return ""

        try:
            if (pelib.OPTIONAL_HEADER.DATA_DIRECTORY[pefile.DIRECTORY_ENTRY['IMAGE_DIRECTORY_ENTRY_IMPORT']].VirtualAddress == 0):
                return ""
        except Exception, e:
            print str(e)
            return ""

        d = []
        dir_ent_imp = None
        try:
            dir_ent_imp = pelib.DIRECTORY_ENTRY_IMPORT
        except Exception, e:
            print str(e)
            return ""
        for entry in dir_ent_imp:

            dll_name = repr(entry.dll).lower()
            l = []
            for imp in entry.imports:
                l.append(repr(imp.name).lower())
                # aux={}
                # aux["name"]=imp.name
                # aux["ordinal"]=imp.ordinal
                # l.append(aux)

            dic_ent = {"lib": dll_name, "functions": l}
            d.append(dic_ent)

        return d