代码片：ListImports

列举PE文件的导入函数信息，功能与格式和 dumpbin /imports一模一样。

不说空话，直接看代码：

void ListImports(DWORD dbase)
{
    char szMsgImport[]="
  %s
	%8X  Import Address Table
	%8X  Import Name Table
	%8x  time date stamp
	%8x  Index of first forwarder reference

";
    char szMsg2[]="      %8X  %s
";
    char szMsg3[]="      %8X
";
    PIMAGE_DOS_HEADER dos=(PIMAGE_DOS_HEADER)dbase;
    PIMAGE_NT_HEADERS nt=(PIMAGE_NT_HEADERS)(dbase+dos->e_lfanew);
    DWORD va=(DWORD)nt->OptionalHeader.DataDirectory[IMAGE_DIRECTORY_ENTRY_IMPORT].VirtualAddress;
    if (!va)
    {
        printf("
No imports

");
        return;
    }
    PIMAGE_IMPORT_DESCRIPTOR iid=(PIMAGE_IMPORT_DESCRIPTOR)RvaToPtr(dbase,va);
    printf("Section contains the following imports:
");
    DWORD imagebase=nt->OptionalHeader.ImageBase;
    while(iid->OriginalFirstThunk || iid->FirstThunk || iid->Name || iid->TimeDateStamp || iid->ForwarderChain)
    {        
        printf(szMsgImport,RvaToPtr(dbase,iid->Name),iid->FirstThunk+imagebase,iid->OriginalFirstThunk+imagebase,iid->TimeDateStamp,iid->ForwarderChain);
        
        if (iid->OriginalFirstThunk)
            va=iid->OriginalFirstThunk;
        else
            va=iid->FirstThunk;
        PDWORD pva=(PDWORD)RvaToPtr(dbase,va);
        while (*pva)
        {
            if (*pva & IMAGE_ORDINAL_FLAG32)
            {
                DWORD dd=(*pva) & 0x0ffff;
                printf(szMsg3,dd);
            }
            PIMAGE_IMPORT_BY_NAME piibn=NULL;
            piibn=(PIMAGE_IMPORT_BY_NAME)RvaToPtr(dbase,*pva);
            printf(szMsg2,piibn->Hint,piibn->Name);
            pva++;
        }
        iid++;
    }
}