摘要： typedef struct _IMAGE_THUNK_DATA32 { union { PBYTE ForwarderString; PDWORD Function; DWORD Ordinal; PIMAGE_IMPORT_BY_NAME AddressOfData; } u1;} IMAGE_THUNK_DATA32;对于OrdinalFirstTunk有两种情况，Ordinal和AddressOfData，如果OridinalFirstThunk(是RVA还得转成RAW)指向的DWORD数据的最高位是1的话，表明是... 阅读全文