hi win32 guruz!

I've seen that export table does not usually contain the final api-address but also a 'helper' ...

I would like to know if Kernel32->GetProcAddress does handle that case!

I would like to use Kernel32->GetProcAddress when dealing with such situation and use binary search in the other case.

thanks.
Posted on 2005-01-25 23:22:45 by badboy

I would like to know if Kernel32->GetProcAddress does handle that case!

Indeed it does, otherwise nothing would work :)
And GPA uses binary search too - it's the reason why exports *must* be sorted.

Unless you're doing software protection, you should stick with GPA.
Posted on 2005-01-26 04:26:12 by f0dder
thanks a lot :-D
i'll do some test as soon as i get access to a w2k box ...
Posted on 2005-01-26 04:53:02 by badboy