Win32 API 枚举dll 导出函数?

时间:2022-10-18
本文介绍了Win32 API 枚举dll 导出函数?的处理方法,对大家解决问题具有一定的参考价值,需要的朋友们下面随着跟版网的小编来一起学习吧!

问题描述

我发现了类似的问题,但没有找到我想要的答案.所以这里是:

I found similar questions but no answer to what I am looking for. So here goes:

对于本机 Win32 dll,是否有 Win32 API 来枚举其导出函数名称?

For a native Win32 dll, is there a Win32 API to enumerate its export function names?

推荐答案

dumpbin/exports 几乎是您想要的,但这是一个开发人员工具,而不是 Win32 API.

dumpbin /exports is pretty much what you want, but that's a developer tool, not a Win32 API.

LoadLibraryExDONT_RESOLVE_DLL_REFERENCES 被严重警告,但碰巧对这种特殊情况很有用它完成了将 DLL 映射到内存的繁重工作(但您实际上并不需要或不想使用库中的任何内容),这使得您读取头文件变得微不足道:LoadLibraryEx<返回的模块句柄/code> 指向它.

LoadLibraryEx with DONT_RESOLVE_DLL_REFERENCES is heavily cautioned against, but happens to be useful for this particular case – it does the heavy lifting of mapping the DLL into memory (but you don't actually need or want to use anything from the library), which makes it trivial for you to read the header: the module handle returned by LoadLibraryEx points right at it.

#include <winnt.h>
HMODULE lib = LoadLibraryEx("library.dll", NULL, DONT_RESOLVE_DLL_REFERENCES);
assert(((PIMAGE_DOS_HEADER)lib)->e_magic == IMAGE_DOS_SIGNATURE);
PIMAGE_NT_HEADERS header = (PIMAGE_NT_HEADERS)((BYTE *)lib + ((PIMAGE_DOS_HEADER)lib)->e_lfanew);
assert(header->Signature == IMAGE_NT_SIGNATURE);
assert(header->OptionalHeader.NumberOfRvaAndSizes > 0);
PIMAGE_EXPORT_DIRECTORY exports = (PIMAGE_EXPORT_DIRECTORY)((BYTE *)lib + header->
    OptionalHeader.DataDirectory[IMAGE_DIRECTORY_ENTRY_EXPORT].VirtualAddress);
assert(exports->AddressOfNames != 0);
BYTE** names = (BYTE**)((int)lib + exports->AddressOfNames);
for (int i = 0; i < exports->NumberOfNames; i++)
    printf("Export: %s
", (BYTE *)lib + (int)names[i]);

完全未经测试,但我认为它或多或少是正确的.(著名的遗言.)

Totally untested, but I think it's more or less correct. (Famous last words.)

这篇关于Win32 API 枚举dll 导出函数?的文章就介绍到这了,希望我们推荐的答案对大家有所帮助,也希望大家多多支持跟版网!