获取PE文件导入的dll列表(Win32, C++)

原创已于 2024-03-01 22:25:22 修改 · 428 阅读

3 ·

CC 4.0 BY-SA版权

文章标签：

#windows #java #开发语言

于 2022-11-17 14:14:46 首次发布

C++ 同时被 3 个专栏收录

87 篇文章

订阅专栏

Win32

83 篇文章

订阅专栏

C语言

5 篇文章

订阅专栏

本文介绍了一段用于获取指定PE文件（如exe或dll）所依赖的所有dll列表的C++代码实现。该方法适用于x64和x86环境，并通过实际案例展示了如何使用此代码来列出两个游戏程序的dll依赖。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

最近需=编写检查某个PE文件(exe或者dll)依赖的dll有哪些, 于是查找资料尝试编写了这段代码, 经测试, 在x64或者x86环境下均可获取x64和x86的PE文件的dll列表.

#include <windows.h>
#include <dbghelp.h>
#include <tchar.h>
#include <vector>
#include <string>

#pragma comment(lib, "dbghelp.lib")

//获取指定模块导入的dll列表
std::vector<std::string> GetDependsDlls(LPCTSTR filePath)
{
    std::vector<std::string> dllList;

    HANDLE hFile = INVALID_HANDLE_VALUE;
    HANDLE hFileMap = NULL;
    LPVOID lpbaseAddress = NULL;

    PIMAGE_NT_HEADERS pNtHeaders = NULL;
    PIMAGE_IMPORT_DESCRIPTOR pImportDesc = NULL;
    DWORD dwSize = 0;

    hFile = CreateFile(filePath, GENERIC_READ, FILE_SHARE_READ, NULL, OPEN_EXISTING, FILE_ATTRIBUTE_NORMAL, NULL);
    if (hFile == INVALID_HANDLE_VALUE)
    {
        goto L_Cleanup;
    }

    hFileMap = CreateFileMapping(hFile, NULL, PAGE_READONLY, 0, 0, NULL);
    if (NULL == hFileMap)
    {
        goto L_Cleanup;
    }
    
    lpbaseAddress = MapViewOfFile(hFileMap, FILE_MAP_READ, 0, 0, 0);
    if (NULL == lpbaseAddress)
    {
        goto L_Cleanup;
    }

    pNtHeaders = ImageNtHeader(lpbaseAddress);
    if (NULL == pNtHeaders)
    {
        goto L_Cleanup;
    }

    pImportDesc = (PIMAGE_IMPORT_DESCRIPTOR)ImageDirectoryEntryToDataEx(lpbaseAddress, FALSE, IMAGE_DIRECTORY_ENTRY_IMPORT, &dwSize, NULL);
    if (NULL == pImportDesc)
    {
        goto L_Cleanup;
    }

    for (int i = 0; 0 != pImportDesc[i].Name; ++i)
    {
        LPCSTR szDllName = (LPCSTR)ImageRvaToVa(pNtHeaders, lpbaseAddress, pImportDesc[i].Name, NULL);
        dllList.push_back(szDllName);
    }

L_Cleanup:
    if (NULL != lpbaseAddress)
    {
        UnmapViewOfFile(lpbaseAddress);
    }

    if (NULL != hFileMap)
    {
        CloseHandle(hFileMap);
    }

    if (INVALID_HANDLE_VALUE != hFile)
    {
        CloseHandle(hFile);
    }

    return dllList;
}

main.cpp


#include <iostream>

int main()
{
    std::vector<std::string> dllList;

    printf("szDllName: %s\n", R"(D:\games\7 Billion Humans.exe)");
    dllList = GetDependsDlls(_T(R"(D:\games\7 Billion Humans.exe)"));
    for (auto item : dllList)
    {
        std::cout << item << std::endl;
    }
    std::cout << std::endl;

    printf("szDllName: %s\n", R"(D:\games\megaman11.exe)");
    dllList = GetDependsDlls(_T(R"(D:\games\megaman11.exe)"));
    for (auto item : dllList)
    {
        std::cout << item << std::endl;
    }
    std::cout << std::endl;

    return 0;
}