取.exe模块的导入表序号并查找导入模块的函数名

Taking .exe modules Import Table ordinal and finding the import modules function name?

本文关键字：导入 模块 查找 函数 exe      更新时间：2023-10-16

所以我将paltalk.exe作为参数加载到我的c++命令行程序中，我得到了这个输出:

 [Walk_Imports]: Imported DLL [0] WSOCK32.dll 
--------------------------------------------------
 [Import_By_Ordinal]: address: 80000016 
 [Import_By_Ordinal]: address: 80000003 
 [Import_By_Ordinal]: address: 80000073 
 [Import_By_Ordinal]: address: 80000017 
 [Import_By_Ordinal]: address: 80000015 
 [Import_By_Ordinal]: address: 8000000B 
 [Import_By_Ordinal]: address: 80000014 
 [Import_By_Ordinal]: address: 8000000E 
 [Import_By_Ordinal]: address: 8000000A 
 [Import_By_Ordinal]: address: 80000034 
 [Import_By_Ordinal]: address: 80000011 
 [Import_By_Ordinal]: address: 80000013 
 [Import_By_Ordinal]: address: 80000010 
 [Import_By_Ordinal]: address: 80000009 
 [Import_By_Ordinal]: address: 80000002 
 [Import_By_Ordinal]: address: 80000008 
 [Import_By_Ordinal]: address: 8000006F 
 [Import_By_Ordinal]: address: 80000097 
 [Import_By_Ordinal]: address: 80000012 
 [Import_By_Ordinal]: address: 80000004 
 [Import_By_Ordinal]: address: 8000000F 
 [Import_By_Ordinal]: address: 8000000C 
 22 functions imported (22 ordinal)

Paltalk导入wsock32.dll ok，好消息。我走过它的入口，我看到那里都是序数名称。

如何使用c或c++加载wsock32.dll并遍历其导出表以匹配序号名称与相应的函数名称?

我希望这些信息足以让你理解我的问题。如果没有，我可以补充更多的信息。

谢谢

关于可移植可执行基础结构的广泛问题，请查看Matt Pietrek http://www.wheaty.net以及他如何在PEDUMP(提供的代码)中实现这些细节的检索。

相关文章：