uint32_t get_iat_size(PIMAGE_DOS_HEADER dos_header,uint32_t import_rva) {if (import_rva == 0)//ntdll沒(méi)有導(dǎo)入表{return 0;}LPBYTE import_va = (LPBYTE)dos_header + import_rva;PIMAGE_IMPORT_DESCRIPTOR imp_desc = (PIMAGE_IMPORT_DESCRIPTOR)import_va;uint32_t iat_fun_number = 0;while (true){if (imp_desc->Name){PIMAGE_THUNK_DATA thunk1 = (PIMAGE_THUNK_DATA)((LPBYTE)dos_header + imp_desc->OriginalFirstThunk);for (;;){if (thunk1->u1.Ordinal == 0){iat_fun_number++; //函數(shù)結(jié)尾0算一個(gè)函數(shù)break;}iat_fun_number++;thunk1 += 1;}imp_desc += 1; //下一個(gè)dll導(dǎo)入函數(shù)數(shù)組}else{break;}}return iat_fun_number * sizeof(PVOID); }

總結(jié)

以上是生活随笔為你收集整理的获取导入表的大小的全部?jī)?nèi)容，希望文章能夠幫你解決所遇到的問(wèn)題。

如果覺(jué)得生活随笔網(wǎng)站內(nèi)容還不錯(cuò)，歡迎將生活随笔推薦給好友。