![]() |
|
#1
|
|||
|
|||
|
Bizarre problem resolving imports from KERNEL32
hi guys,
i am resolving imports from kernel32, using my own routine (that scan dll export table, in the classical and tested way), but i am getting weird results with some APIs... for example, when trying to get the address of HeapAlloc, i get a address... but in this address, isnt function code, but a string: NTDLL.HeapAllocate the same happen with others APIs, like RtlUnwind anybody know whats happening? i am using xp sp2, and i already coded that dll export scan routine 100 times, and it always worked thanks in advance, ancev |
| Thread Tools | |
| Display Modes | |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Resolving Stack Pointer problem | java3ever | General Discussion | 1 | 06-20-2017 13:57 |
| Any idea, problem after resolving? | MAHMUT | General Discussion | 2 | 02-10-2005 00:01 |
| KERNEL32 imports in IDA Pro | pez | General Discussion | 9 | 08-27-2004 05:10 |
| how to replace kernel32.dll in win2k/xp | tAz | General Discussion | 12 | 02-06-2004 03:46 |